Enhanced DCE RMF Metrics Control with DataOutput Parameter(PTF DCE1136) - ironstream_for_servicenow_discovery_1 - Latest

Ironstream for Splunk®/Kafka®/Elastic® for IBM Z® Release Notes

Product type
Software
Portfolio
Integrate
Product family
Ironstream
Product
Ironstream > Ironstream for Kafka®
Ironstream > Ironstream for Elastic®
Ironstream > Ironstream for Splunk®
Version
Latest
Language
English
Product name
Ironstream for Splunk®/Kafka®/Elastic® for IBM Z®
Title
Ironstream for Splunk®/Kafka®/Elastic® for IBM Z® Release Notes
First publish date
2014
Last updated
2024-09-26
Published on
2024-09-26T07:29:10.702304

To prevent large amounts of collected RMF III metrics from exceeding the maximum event size – and potentially losing the forwarded data on the destination – DCE RMF features a new DataOutput configuration parameter, which allows you to direct how the selected metrics are built into events before forwarding RMF III data.

The DataOutput parameter provides three metric selection options:

  • Group – (default) Continues logically grouping metrics together.

  • Multi – Each RMF metric will be sent as a single event that includes all values within that metric.

  • Single – Each value within a metric will be sent as a separate event.

When using the default Group mode, large RMF metric groupings could potentially exceed the maximum supported event size. Switching to either the Multi or Single mode will effectively reduce the record length and avoid warning messages.

For more information, refer to the “Setting Up the RMF Forwarder” chapter in the Ironstream Configuration and User’s Guide.