topic Lost packages when using tcp syslog and packages need to be splitted because of big size in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Lost-packages-when-using-tcp-syslog-and-packages-need-to-be/m-p/505941#M86184 <P>When using syslog through tcp (instead of udp) from imperva, many packages are lost since they do not arrive in order. So at destination everything is screwed up since they can not be reassembled</P> Wed, 24 Jun 2020 11:34:50 GMT leebsr 2020-06-24T11:34:50Z Lost packages when using tcp syslog and packages need to be splitted because of big size https://community.splunk.com/t5/Getting-Data-In/Lost-packages-when-using-tcp-syslog-and-packages-need-to-be/m-p/505941#M86184 <P>When using syslog through tcp (instead of udp) from imperva, many packages are lost since they do not arrive in order. So at destination everything is screwed up since they can not be reassembled</P> Wed, 24 Jun 2020 11:34:50 GMT https://community.splunk.com/t5/Getting-Data-In/Lost-packages-when-using-tcp-syslog-and-packages-need-to-be/m-p/505941#M86184 leebsr 2020-06-24T11:34:50Z