All Apps and Add-ons

How to stop the eventgen and how to get the number of events generated by eventgen?

chitra
Explorer

i want to know the number of events generated by eventgen, is it update this count somewhere in the log file?
On restart of splunkd daemon, eventgen generating the file, how can i stop the eventgen when it reaches to specific event count?

Tags (1)
1 Solution

lmyrefelt
Builder

You can stop the eventgen (easiest) by "Disabling" the app under "App management".

To check how many events you have generated:
index=eventGenIndex | stats count

| metadata type=sourcetypes index=eventGenIndex

Not sure you can stop the eventgen after a specific number of events (with out writing a script) ... maybe it is a config question?
docs:

https://github.com/coccyx/eventgen

https://apps.splunk.com/app/1924/#/documentation

View solution in original post

Venkat_16
Contributor

The application can be disabled by commenting the eventgen.conf file with "#".

0 Karma

lmyrefelt
Builder

You can stop the eventgen (easiest) by "Disabling" the app under "App management".

To check how many events you have generated:
index=eventGenIndex | stats count

| metadata type=sourcetypes index=eventGenIndex

Not sure you can stop the eventgen after a specific number of events (with out writing a script) ... maybe it is a config question?
docs:

https://github.com/coccyx/eventgen

https://apps.splunk.com/app/1924/#/documentation

koshyk
Super Champion

disabling still generates event (i've tried sample tutorial2) 😞

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...