What would occur to the logs being despatched to SPLUNK when there's a network failure? i'm sending information to SPLUNK via my Java software using TCP. Are there any solutions supplied for this from SPLUNK facet?
Hello there,
if you are using a universal (or heavy) forwarder read this page all the way:
https://docs.splunk.com/Documentation/Forwarder/6.6.1/Forwarder/Protectagainstthelossofin-flightdata
hope it helps