topic How do you fix a Stream TCP reassembly queue overflow? in All Apps and Add-ons https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-you-fix-a-Stream-TCP-reassembly-queue-overflow/m-p/374904#M45467 <P>The Splunk Stream forwarders on my two primary DNS servers are failing every couple of hours for a TCP reassembly queue overflow. I tried doubling the queue size and filtering out all internal DNS traffic, but the agents still shutdown daily. Has anyone dealt with this before and know what settings to tweak?</P> Tue, 13 Feb 2018 21:42:30 GMT joeldavideng 2018-02-13T21:42:30Z How do you fix a Stream TCP reassembly queue overflow? https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-you-fix-a-Stream-TCP-reassembly-queue-overflow/m-p/374904#M45467 <P>The Splunk Stream forwarders on my two primary DNS servers are failing every couple of hours for a TCP reassembly queue overflow. I tried doubling the queue size and filtering out all internal DNS traffic, but the agents still shutdown daily. Has anyone dealt with this before and know what settings to tweak?</P> Tue, 13 Feb 2018 21:42:30 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-do-you-fix-a-Stream-TCP-reassembly-queue-overflow/m-p/374904#M45467 joeldavideng 2018-02-13T21:42:30Z