CCSE: CrowdStrike Certified SIEM Engineer

For high-throughput ingestion, sink throughput depends in part on the number of concurrent requests (workers) it can send. Increasing sink workers improves performance when parallel requests are the bottleneck and the LogScale endpoint has capacity. A larger memory queue merely buffers data and does not increase sink throughput.