Custom lagging values for data_hosts are reset to the default value

[sebwurl]

Hi, I'm running the app on a single Search Head with Splunk 8.2.2.2. I'm using the latest version of the TrackMe app (1.2.53). I'm trying to set custom lagging values per data_host. _Click on datahost -> modify -> enter custom lag -> apply manual lagging rule

First it seems to work and my custom value is displayed, but after some minutes it is reset to the default of 3600. This also instantly when I run the ShortTermTracker, so maybe this the reason. Am I doing or understanding something wrong, or is this a bug?

Cheers :) Tony

[guilhemmarchand]

Hi @TonyY17

This likely is happening because you need to set "override policies":

https://trackme.readthedocs.io/en/latest/userguide.html#maximal-lagging-value

When you set a custom lag value for a given host need to set the override.

Can you verify please?

[sebwurl]

That did the trick, thanks :)