When a collector ist stopped the incoming events are stored (PageFiles) and a filesystem can be filled with this files.

So an second option would be very usefull:

The second option would be, that the collector ist stopped and all incoming events for this collector should be deleted. This can help in case the CM is overloaded und there are Event Sources, that are not used so far in Correlations or Reports.

by: Ulrich S. | over a year ago | Configuration