Getting Data In

What can be the effects of rebooting a server without taking the forwarder down cleanly?

danielbb
Motivator

Many of the forwarders here go down when the servers go for maintenance work. What can go wrong with the forwarders when we don't shut them down cleanly?

Tags (3)
0 Karma
1 Solution

adonio
Ultra Champion

I think the main thing that can happen is that they wont start up properly.
other then that, if you have scripted inputs, the scripts wont run, for monitor data, you will resume to (or close) the point where the forwarder stopped.
if its using as an aggregation, meaning. intermediate forwarder, then youll probably lose data

View solution in original post

adonio
Ultra Champion

I think the main thing that can happen is that they wont start up properly.
other then that, if you have scripted inputs, the scripts wont run, for monitor data, you will resume to (or close) the point where the forwarder stopped.
if its using as an aggregation, meaning. intermediate forwarder, then youll probably lose data

Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...