Hello all, I would like to know if there is a way to limit the number of forked process (used by report or shellcmd calls) that run in parallel, indeed I know that logs that sec analyze for me can be huge and in some circumstances we can receive a lot of logs that will trigger a report command, and I think that in this kind of circumstances it can impact my server if the number of tasks running in parallel is too high. In this special case I dont want to make use of a window to reduce the number of triggered actions.
Best Regards, Kevin, ------------------------------------------------------------------------------ All of the data generated in your IT infrastructure is seriously valuable. Why? It contains a definitive record of application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-d2d-c2 _______________________________________________ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users