trying to understand passthrough, not sure why its reducing events.
are you sure there is no pre or post processing pipeline attached?
yes. as I did not configure them.
Also, this was performed using QuickConnect so that should not be the case as well.
agreed. Is your destination getting any backpressure?
at source i mentinoed index=sgwindows but
at the destination side, i the index did not get populated with even a single event.
networking seems ok.
but Cribl egress and ingress are first so with passthru it should do expected so i go next in sequence and see..
I am assuming some issue with Event breaking might cause this, its a guess.
a capture on the source should show you if event breaking works correctly
yes, I wanted to run the capture as well.. so just doing the JS sandbox right now.
Is this on the same time frame?
The latter looks like it's a shorter time frame...
i will rerun and share update shortly.