https://community.splunk.com/t5/Getting-Data-In/caching-events-to-disk-on-Universal-Forwarder/m-p/202607#M40073 <P><A href="http://docs.splunk.com/Documentation/Splunk/6.3.3/Data/Usepersistentqueues">These</A> are the queues you're looking for.</P> Fri, 12 Feb 2016 10:06:08 GMT martin_mueller 2016-02-12T10:06:08Z https://community.splunk.com/t5/Getting-Data-In/caching-events-to-disk-on-Universal-Forwarder/m-p/202606#M40072 <P>Hi!<BR /> According to documentation on outputs.conf, maxQueueSize sets value for amount of RAM that queue can take when indexer is down.<BR /> But I need to be able tocache large amounts of events, for example 5 or 10Gb and i want to do it using HDD. <BR /> How can I do that?</P> Fri, 12 Feb 2016 06:41:24 GMT https://community.splunk.com/t5/Getting-Data-In/caching-events-to-disk-on-Universal-Forwarder/m-p/202606#M40072 ibondarets 2016-02-12T06:41:24Z https://community.splunk.com/t5/Getting-Data-In/caching-events-to-disk-on-Universal-Forwarder/m-p/202607#M40073 <P><A href="http://docs.splunk.com/Documentation/Splunk/6.3.3/Data/Usepersistentqueues">These</A> are the queues you're looking for.</P> Fri, 12 Feb 2016 10:06:08 GMT https://community.splunk.com/t5/Getting-Data-In/caching-events-to-disk-on-Universal-Forwarder/m-p/202607#M40073 martin_mueller 2016-02-12T10:06:08Z