https://community.splunk.com/t5/All-Apps-and-Add-ons/TCP-Input-or-SQL-for-Websense-Security-Logs/m-p/163424#M15313 <P>Since I have seen some posts that say that SQL Logs are the way to go, and TCP inputs have the possibility of losing data if the splunk server were to go down. I am going to say that the better way is through MSSQL as it will pick up where it left off.</P> Mon, 24 Feb 2014 15:59:11 GMT aelliott 2014-02-24T15:59:11Z https://community.splunk.com/t5/All-Apps-and-Add-ons/TCP-Input-or-SQL-for-Websense-Security-Logs/m-p/163423#M15312 <P>To feed logs from Websense to Splunk, which would be ideal and why?<BR /> As a TCP Input<BR /> From MSSQL</P> <P>If Splunk server goes down, will logs be lost using the TCP input?</P> Mon, 24 Feb 2014 15:29:44 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/TCP-Input-or-SQL-for-Websense-Security-Logs/m-p/163423#M15312 aelliott 2014-02-24T15:29:44Z https://community.splunk.com/t5/All-Apps-and-Add-ons/TCP-Input-or-SQL-for-Websense-Security-Logs/m-p/163424#M15313 <P>Since I have seen some posts that say that SQL Logs are the way to go, and TCP inputs have the possibility of losing data if the splunk server were to go down. I am going to say that the better way is through MSSQL as it will pick up where it left off.</P> Mon, 24 Feb 2014 15:59:11 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/TCP-Input-or-SQL-for-Websense-Security-Logs/m-p/163424#M15313 aelliott 2014-02-24T15:59:11Z