Setting the maximum EPS rate
You can set the maximum events per second (EPS) rate that IBM® Disconnected Log Collector sends to IBM QRadar®.
The default is 5000. The maximum rate is applied to UDP and TLS over TCP connections to QRadar.
- Log in to the Disconnected Log Collector computer or VM as the root user.
- Open the /opt/ibm/si/services/dlc/conf/config.json file in a text editor.
- In the EPS parameter, enter the maximum EPS rate that Disconnected Log Collector sends to QRadar.
- Save and close the config.json file.
Restart Disconnected Log
Collector by typing the
systemctl restart dlc