Data Forwarding Issues - Splunk Troubleshooting Use Case - 6

13.06.24 10:22 PM - By Murugan

Data Forwarding Issues:

Issue: Forwarder is not sending data
Scenario-4: Intermittent data flow -But the source is producing the data live
Root Cause:
Sudden burst of incoming data, leads to stall the forwarder queue
Solution:
This is expected in few scenarios where the data sources are too many. One way to reduce this issue is to enable inputs one by one.

Murugan