# Sleep Each Individual Event

**URL:** <https://discuss.elastic.co/t/sleep-each-individual-event/108621>\
**Category:** Logstash\
**Created:** [November 21, 2017, 10:17pm UTC](https://discuss.elastic.co/t/sleep-each-individual-event/108621 "2017-11-21T22:17:19Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![seth.yes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/seth.yes/32/11788_2.png) [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Post date:** [November 21, 2017, 10:17pm UTC](https://discuss.elastic.co/t/sleep-each-individual-event/108621/1 "2017-11-21T22:17:19Z")

</div>

Logstash v5.6.2.

I am encountering a race condition where a network monitor I'm building is passing alerts to Logstash. The issue is that I also query an Icinga Monitor every 60s in an attempt to generate a list of known alerts which Logstash can safely ignore. Therefore, I need to hold an event for 60 seconds prior to sending it through the Logstash pipeline.

Is there any way to sleep individual events for 60s to ensure my Icinga database is up to speed? Any recommendations on plugins or third party tools which could help me accomplish this?

I've attempted to use the 'sleep' plugin, however that stalls all of Logstash, which doesn't work for my use-case.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 19, 2017, 10:17pm UTC](https://discuss.elastic.co/t/sleep-each-individual-event/108621/2 "2017-12-19T22:17:24Z")

</div>

Closed on December 19, 2017, 10:17pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
