This documentation does not apply to the most recent version of Splunk® Add-on for Windows.
For documentation on the most recent version, go to the latest release.
Performance reference for the Splunk Add-on for Windows
The following table provides the average events per second (EPS) for the listed WinEventLog channels:
| Log Name | Number of Events | Seconds (Classic) | EPS (Classic) | Seconds (XML) | EPS (XML) |
|---|---|---|---|---|---|
| Application | 50000 | 8.5 | 5882 | 9.75 | 5128 |
| System | 50000 | 9.5 | 5263 | 10.2 | 4901 |
| Security | 45377 | 13.33 | 3404 | 16 | 2836 |
| Powershell | 50000 | 7.33 | 6821 | 8 | 6250 |
Last modified on 06 January, 2021
| Lookups for the Splunk Add-on for Windows |
This documentation applies to the following versions of Splunk® Add-on for Windows: 8.1.1
Download manual
Feedback submitted, thanks!