$SPLUNK_HOME/etc/system/local/web.conf is the one you would want to adjust the splunkdConnectionTimeout in.  ... View more

I know this is quite a late response, but you should be able to accomplish this with using the "Filter using Regex". Select "host" for Source Field In "Drop Events Matching Regular Expression", enter ^foo- That will set it so any events with the host field value, that starts with foo- will be dropped.  ... View more