Hi!
I would like to ask question for the backoff setting with universal forwarder.
According to the document , if useACK option is set blocks can be resend if
a network failure occurs.
http://docs.splunk.com/Documentation/Splunk/6.0/Forwarding/Protectagainstlossofin-flightdata
However, in the ouputs.conf , useACK option is not required if you want to confiure the backoff
setting.
Is a backoff setting default function for the forwarder?
Thanks,
Yu
I would configure this setting to true and following the backoff setting in the outputs.conf.spec file:
http://docs.splunk.com/Documentation/Splunk/6.0/Admin/Outputsconf
Hi!
Is both setting required?
Thanks.