Good morning all. I am having an issue with capturing Windows Event Viewer logs. I am getting the data but I'd like to have it sent at a different interval than the forwarder is using. I've set the checkpontInterval = setting to many different settings, but the data is updating every 3-5 seconds no matter what the setting is set to. I've posted the relevant inputs.conf lines below. Any help would be appreciated.
thanks,
[WinEventLog://System]
index = windowssystemlogs
checkpointInterval = 120
current_only = 0
disabled = 0
start_from = oldest