We have updated our Terms of Service, Code of Conduct, and Addendum.

How does the primary server schedule out script collectors?

how does the primary server schedule out script collectors? We were looking at the stats for one of the collectors (looking at the data in Splunk) and it appears that one worker node pulled 10,000 events and another pulled in maybe 257 events (number varies on second worker). Does the primary keep track of the state of a collector to switch it to another worker to pull the remaining events or something? Just trying to understand

Answers