https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-not-sending-previous-logs/m-p/564522#M100506 <P>Hi,</P><P>I am using Universal Forwarder &nbsp;on a Mac configured to monitor a few log files. It is sending data fine, and it resumes sending data from those files after a disruption of the network.</P><P>The thing is, it is not sending the data written to the log files while the internet was off. Maybe it is caching the data elsewhere and not sending it?&nbsp;</P><P>Reading the documentation, I see that there is no persistent queue for the monitor input. Does that mean that the forward won't pause the parsing of a log file when it can't reach the server?</P> Tue, 24 Aug 2021 12:46:16 GMT francisaugusto 2021-08-24T12:46:16Z https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-not-sending-previous-logs/m-p/564522#M100506 <P>Hi,</P><P>I am using Universal Forwarder &nbsp;on a Mac configured to monitor a few log files. It is sending data fine, and it resumes sending data from those files after a disruption of the network.</P><P>The thing is, it is not sending the data written to the log files while the internet was off. Maybe it is caching the data elsewhere and not sending it?&nbsp;</P><P>Reading the documentation, I see that there is no persistent queue for the monitor input. Does that mean that the forward won't pause the parsing of a log file when it can't reach the server?</P> Tue, 24 Aug 2021 12:46:16 GMT https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-not-sending-previous-logs/m-p/564522#M100506 francisaugusto 2021-08-24T12:46:16Z