Hi,
I am trying to find a solution to a potential problem that I have. I want to limit the amount of data that Logstash can send onto Splunk. Does Logstash have any functionality that will allow me to set a threshold of say 1GB per host per day?
Thanks in advance,
Steve