Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

ITSI: data ingestion/indexing rate - do I need to limit this if KPI is in minutes time scale?

$
0
0
With ITSI, in view of KPI search is in minutes time scale, do I need to limit the data ingestion/indexing rate? Since ITSI KPIs are normally scheduled to search in 1, 5, 15 minutes interval. When designing how frequent to forward events for indexing (e.g. system metric like CPU, memory, disk activities), is it a good practice (for performance consideration) to control the system metric data ingestion/indexing rate, so as to align with the KPI search interval (e.g. every 30 seconds, instead of every second?)? Any best practice to govern this?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>