topic Universal Forwarder for Mac not resuming sending when using PersistentQueue in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-for-Mac-not-resuming-sending-when-using/m-p/564517#M100505 <P>I have tried two input modes: monitor and tcp. When I use the monitor mode and read text files, the data sending from the Universal Forwarder resumes in case the network connectivity gets lost.</P><P>However, when I use tcp as an input and a persistent queue, I see that the queue grows while there is no connectivity (for example, if I turn wifi off). When turning the connection on again, the persistent queue remains growing and no data is actually sent to the server.</P><P>I have to restart Splunk so that the sending resumes. The restarting takes a few minutes - not the case with the monitor mode - and when it finally restarts, the persistent queue is erased and the data that was saved there doesn't get sent.&nbsp;</P><P>Is there a major bug with the universal forwarder?</P> Tue, 24 Aug 2021 12:32:37 GMT francisaugusto 2021-08-24T12:32:37Z Universal Forwarder for Mac not resuming sending when using PersistentQueue https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-for-Mac-not-resuming-sending-when-using/m-p/564517#M100505 <P>I have tried two input modes: monitor and tcp. When I use the monitor mode and read text files, the data sending from the Universal Forwarder resumes in case the network connectivity gets lost.</P><P>However, when I use tcp as an input and a persistent queue, I see that the queue grows while there is no connectivity (for example, if I turn wifi off). When turning the connection on again, the persistent queue remains growing and no data is actually sent to the server.</P><P>I have to restart Splunk so that the sending resumes. The restarting takes a few minutes - not the case with the monitor mode - and when it finally restarts, the persistent queue is erased and the data that was saved there doesn't get sent.&nbsp;</P><P>Is there a major bug with the universal forwarder?</P> Tue, 24 Aug 2021 12:32:37 GMT https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-for-Mac-not-resuming-sending-when-using/m-p/564517#M100505 francisaugusto 2021-08-24T12:32:37Z