BatchManager

BatchManager is a class used to control batch dispatch to Splunk HEC.

BatchManager

BatchManager was designed to hold log events until BatchIntervalInMiliseconds or BatchSizeCount reach their limits, sending those logs to Splunk after reaching any of those limits.

Tune your batch

By default after 5 seconds or after add 10 logs a dispatch call is processed and data is sent to Splunk.

You always should check if those default limits are good for your, since you can tune your batch to avoid lose data or for cases where you need your log ASAP.

Disabling batch

If you don't want to send data to Splunk as batch you can set BatchIntervalInMiliseconds equals to 0 (zero) and BatchSizeCount equals to 1 (one).

That way interval timer will not be created and for each log generated dispatch process will be invoked.