https://community.splunk.com/t5/Getting-Data-In/Persistent-queues-for-Windows-event-logs/m-p/334995#M61970 <P>Where does Splunk store the persistent queues for Windows logs. I am able to find the TCP and UDP queued logs but cannot find the Windows logs. </P> Thu, 26 Oct 2017 12:08:56 GMT reginaldsheetz_ 2017-10-26T12:08:56Z https://community.splunk.com/t5/Getting-Data-In/Persistent-queues-for-Windows-event-logs/m-p/334995#M61970 <P>Where does Splunk store the persistent queues for Windows logs. I am able to find the TCP and UDP queued logs but cannot find the Windows logs. </P> Thu, 26 Oct 2017 12:08:56 GMT https://community.splunk.com/t5/Getting-Data-In/Persistent-queues-for-Windows-event-logs/m-p/334995#M61970 reginaldsheetz_ 2017-10-26T12:08:56Z https://community.splunk.com/t5/Getting-Data-In/Persistent-queues-for-Windows-event-logs/m-p/334996#M61971 <P>Hello there @reginaldsheetz_mantech</P> <P>The path for PQs &gt; <CODE>$SPLUNK_HOME/var/run/splunk/[tcpin|udpin]/pq__&lt;port&gt;</CODE></P> <P><A href="https://docs.splunk.com/Documentation/SplunkCloud/latest/Data/Usepersistentqueues#Persistent_queue_location">https://docs.splunk.com/Documentation/SplunkCloud/latest/Data/Usepersistentqueues#Persistent_queue_location</A></P> Thu, 26 Oct 2017 13:29:31 GMT https://community.splunk.com/t5/Getting-Data-In/Persistent-queues-for-Windows-event-logs/m-p/334996#M61971 alemarzu 2017-10-26T13:29:31Z