Has anyone had to backpressure a destination via Persistent Queue? We moved our SIEM appliance today to another building and built up about 95g into the 100g queue. When the SIEM came back online all 95g went in 5 min....is there a way to slow that down? The SIEM could not handle that amount events that quick.
Sign up
Already have an account? Login
Login to the community
No account yet? Create an account
Using your Cribl Curious or University Account
User Login Employee loginEnter your E-mail address. We'll send you an e-mail with instructions to reset your password.