Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Blacklist question

$
0
0
Hi , I am blacklisting some excessive message in the transforms.conf. Here is an example of my config: [md_client_blacklist] REGEX = (\(DEBUG,)|(Ignoring gap) As a result I do not see any "Ignoring gap" message in my search (as expected). Is there is a setting that would let me to see every 1000th "Ignoring gap" message in my search? ( I would not like to completely blacklist this message). Thank you.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>