I'm one overage away from violating my licenses due to an AV scan on my QA environments and would like to temporarily stop indexing during those AV scans.
How can I block Splunk from indexing during a specified time period?
↧