workload rule

workload rule


A policy that you define to manage search workloads automatically when using workload management in Splunk Enterprise. Each workload rule specifies a predicate condition that a search must meet before an automatic action is taken, such as placing the search in a designated workload pool, aborting the search, or moving the search to an alternative workload pool.

For more information

In Splunk Enterprise Workload Management: