https://community.splunk.com/t5/Getting-Data-In/nullqueue-or-nullQueue/m-p/86426#M17967 <P>nullQueue is the correct spelling.</P> Wed, 10 Oct 2012 19:52:52 GMT lguinn2 2012-10-10T19:52:52Z https://community.splunk.com/t5/Getting-Data-In/nullqueue-or-nullQueue/m-p/86425#M17966 <P>I saw this in transforms.conf : should if be nullQueue or nullqueue ?</P> <PRE> [send_to_nullqueue] DEST_KEY = queue REGEX = . FORMAT = nullQueue </PRE> Wed, 10 Oct 2012 19:12:37 GMT https://community.splunk.com/t5/Getting-Data-In/nullqueue-or-nullQueue/m-p/86425#M17966 yannK 2012-10-10T19:12:37Z https://community.splunk.com/t5/Getting-Data-In/nullqueue-or-nullQueue/m-p/86426#M17967 <P>nullQueue is the correct spelling.</P> Wed, 10 Oct 2012 19:52:52 GMT https://community.splunk.com/t5/Getting-Data-In/nullqueue-or-nullQueue/m-p/86426#M17967 lguinn2 2012-10-10T19:52:52Z https://community.splunk.com/t5/Getting-Data-In/nullqueue-or-nullQueue/m-p/86427#M17968 <P>Thank you, I tested with the wrong one, and it created 2 lines in metrics, that look identical but are not.<BR /> `<BR /> 10-02-2012 08:26:13.261 -0400 INFO Metrics - group=queue, name=nullqueue, max_size_kb=500, current_size_kb=0, current_size=0, largest_size=0, smallest_size=0<BR /> 10-02-2012 08:26:13.261 -0400 INFO Metrics - group=queue, name=nullqueue, blocked=true, max_size_kb=500, current_size_kb=499, current_size=998, largest_size=998, smallest_size=998</P> <P>and when the wrong queue one was full, my indexer was buster, unable to accept any data. So please use the correct nullQueue.<BR /> `</P> Mon, 28 Sep 2020 12:36:32 GMT https://community.splunk.com/t5/Getting-Data-In/nullqueue-or-nullQueue/m-p/86427#M17968 yannK 2020-09-28T12:36:32Z