topic Re: heavy forwarder in Splunk Enterprise https://community.splunk.com/t5/Splunk-Enterprise/How-will-the-data-accumulate-in-the-persistent-queue-of-the/m-p/587864#M11765 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/243040">@human96</a>&nbsp;<BR /><BR /><STRONG>Just one thing to&nbsp;highlight</STRONG><BR /><SPAN>Persistent queuies are not avaiable to all inputs ex: file monitoring ,&nbsp;<BR /><BR />it only works with follwing inputs&nbsp;</SPAN></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="SanjayReddy_0-1646662589868.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/18338iC320D6846AEBD2E5/image-size/medium?v=v2&amp;px=400" role="button" title="SanjayReddy_0-1646662589868.png" alt="SanjayReddy_0-1646662589868.png" /></span></P><P>and regarding your question for queue size&nbsp;&nbsp;<BR /><BR />it would be 10 GB for all, it doesnt depend on forwarder count&nbsp;<BR /><BR /><SPAN>Persistent queuies location&nbsp;</SPAN></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="SanjayReddy_2-1646662824495.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/18340i8574FA43AD60835C/image-size/medium?v=v2&amp;px=400" role="button" title="SanjayReddy_2-1646662824495.png" alt="SanjayReddy_2-1646662824495.png" /></span></P><P>&nbsp;</P> Mon, 07 Mar 2022 14:20:50 GMT SanjayReddy 2022-03-07T14:20:50Z How will the data accumulate in the persistent queue of the universal forwarder? https://community.splunk.com/t5/Splunk-Enterprise/How-will-the-data-accumulate-in-the-persistent-queue-of-the/m-p/587831#M11762 <DIV>i have 1 universal forwarder and 2 heavy forwarder.</DIV> <DIV>If two of my heavy forwarder lost communication with the UF at the same time, how will the data accumulate in the persistent queue of the UF?&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV>please provide splunk documentation or previous splunk community Q&amp;A if you have any.</DIV> <DIV>&nbsp;</DIV> Tue, 08 Mar 2022 04:48:23 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-will-the-data-accumulate-in-the-persistent-queue-of-the/m-p/587831#M11762 human96 2022-03-08T04:48:23Z Re: heavy forwarder https://community.splunk.com/t5/Splunk-Enterprise/How-will-the-data-accumulate-in-the-persistent-queue-of-the/m-p/587837#M11763 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/243040">@human96</a>&nbsp;<BR /><BR /><SPAN>data accumulate in the persistent queue based on size you defined for&nbsp; it inputs.conf</SPAN></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="SanjayReddy_1-1646652480211.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/18336i89A97C5B657BAA10/image-size/medium?v=v2&amp;px=400" role="button" title="SanjayReddy_1-1646652480211.png" alt="SanjayReddy_1-1646652480211.png" /></span></P><P><A href="https://docs.splunk.com/Documentation/Splunk/latest/Data/Usepersistentqueues" target="_blank">https://docs.splunk.com/Documentation/Splunk/latest/Data/Usepersistentqueues</A><BR /><BR /></P><P>&nbsp;</P><P>&nbsp;</P> Mon, 07 Mar 2022 11:32:03 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-will-the-data-accumulate-in-the-persistent-queue-of-the/m-p/587837#M11763 SanjayReddy 2022-03-07T11:32:03Z Re: heavy forwarder https://community.splunk.com/t5/Splunk-Enterprise/How-will-the-data-accumulate-in-the-persistent-queue-of-the/m-p/587855#M11764 <P>i installed&nbsp; a universal forwarder in Windows server 2019.<BR />assume i configured for 2 heavy forwarder and persistent queue is 10 GB. Does that mean i'll get 20 GB for 2 heavy forwarder or 10 GB for 2 forwarder ?<BR />where and how can i check my persistent queue, whether the data is storing or not ?&nbsp;&nbsp;</P> Mon, 07 Mar 2022 13:36:59 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-will-the-data-accumulate-in-the-persistent-queue-of-the/m-p/587855#M11764 human96 2022-03-07T13:36:59Z Re: heavy forwarder https://community.splunk.com/t5/Splunk-Enterprise/How-will-the-data-accumulate-in-the-persistent-queue-of-the/m-p/587864#M11765 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/243040">@human96</a>&nbsp;<BR /><BR /><STRONG>Just one thing to&nbsp;highlight</STRONG><BR /><SPAN>Persistent queuies are not avaiable to all inputs ex: file monitoring ,&nbsp;<BR /><BR />it only works with follwing inputs&nbsp;</SPAN></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="SanjayReddy_0-1646662589868.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/18338iC320D6846AEBD2E5/image-size/medium?v=v2&amp;px=400" role="button" title="SanjayReddy_0-1646662589868.png" alt="SanjayReddy_0-1646662589868.png" /></span></P><P>and regarding your question for queue size&nbsp;&nbsp;<BR /><BR />it would be 10 GB for all, it doesnt depend on forwarder count&nbsp;<BR /><BR /><SPAN>Persistent queuies location&nbsp;</SPAN></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="SanjayReddy_2-1646662824495.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/18340i8574FA43AD60835C/image-size/medium?v=v2&amp;px=400" role="button" title="SanjayReddy_2-1646662824495.png" alt="SanjayReddy_2-1646662824495.png" /></span></P><P>&nbsp;</P> Mon, 07 Mar 2022 14:20:50 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-will-the-data-accumulate-in-the-persistent-queue-of-the/m-p/587864#M11765 SanjayReddy 2022-03-07T14:20:50Z