Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

can I offset the polling interval for scripts per source server

$
0
0

I am looking at using the Unix/Linux app for monitoring a large number of servers and it occurs to me that it can't be good for all the servers to send events all at the same time to the same indexer. I want to use the same intervals for all servers for consistency, but offset them from each other by a few seconds, to reduce event spikes at the receiver on the minute, ten minutes, hour etc.

If this is not an available option then any ideas? I was thinking to modify the default polling scripts to sleep for x seconds when starting up where x = a hash of the server IP address mod 60.


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>