Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

caching events to disk on Universal Forwarder

$
0
0
Hi! According to documentation on outputs.conf, maxQueueSize sets value for amount of RAM that queue can take when indexer is down. But I need to be able tocache large amounts of events, for example 5 or 10Gb and i want to do it using HDD. How can I do that?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>