This message originated from Cribl Community Slack.
Click here to view the original link.
For System_State data sets -
Can we add a polling interval per Collector/Metric? Or do we have to add new Sources and group the Collectors/Metrics by polling interval.
Example - I dont need host info every 5 minutes. Listening Ports on the other hand....might be good every 5 minutes.
Solved
System_State Polling Interval Configuration Needed Per Collector/Metric
Best answer by Jon Rust
Work around... use an Aggregation or Suppression function to selectively minimize the data coming through
Work around... use an Aggregation or Suppression function to selectively minimize the data coming through
Yeah that can work. I do feel that adds more overhead with computation cycles - which are already limited on Edge.
Is that worth submitting a FR for?
pretty minimal load. we're talking 10s or maybe 100s of events per 5 minutes. Event 1000 events would be barely touching the cpu
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.