# How to Trigger Spike in Remote File Transfers

**URL:** <https://discuss.elastic.co/t/how-to-trigger-spike-in-remote-file-transfers/375415>\
**Category:** Elastic Security\
**Created:** [March 5, 2025, 12:57am UTC](https://discuss.elastic.co/t/how-to-trigger-spike-in-remote-file-transfers/375415 "2025-03-05T00:57:02Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![warren.cruz](https://avatars.discourse-cdn.com/v4/letter/w/f08c70/32.png) [@warren.cruz](https://discuss.elastic.co/u/warren.cruz)\
**Post date:** [March 5, 2025, 12:57am UTC](https://discuss.elastic.co/t/how-to-trigger-spike-in-remote-file-transfers/375415/1 "2025-03-05T00:57:02Z")

</div>

Good day.

I'd like to ask about how to get a hit on _Spike in Remote File Transfers_ for testing purposes.

I saw the `high_count` function being used. Is there a definite number of events that will do the trick?

I made a modification to the query in order to better satisfy the kind of testing that I'm doing (added "WinSCP.exe" to `process.name`):

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/5/2551c1cd917388b80a1a0017b5b26531694ff7e8.jpeg)

Thanks for the help!

Regards,  
Warren

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 2, 2025, 12:57am UTC](https://discuss.elastic.co/t/how-to-trigger-spike-in-remote-file-transfers/375415/2 "2025-04-02T00:57:37Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.