https://community.splunk.com/t5/Getting-Data-In/Is-there-any-chunk-size-applied-while-reading-the-data-on-the/m-p/520709#M88000 <P>How is the data being read?&nbsp; It sounds like maybe a TCP or UDP connection.&nbsp; If so, stop everything and read&nbsp;<A href="http://www.georgestarcher.com/splunk-success-with-syslog/" target="_blank">http://www.georgestarcher.com/splunk-success-with-syslog/</A></P><P>If that is not the case then please describe your architecture and how the input is defined.</P> Tue, 22 Sep 2020 01:02:20 GMT richgalloway 2020-09-22T01:02:20Z https://community.splunk.com/t5/Getting-Data-In/Is-there-any-chunk-size-applied-while-reading-the-data-on-the/m-p/520673#M87997 <P>Is there any chunk size applied while reading the data on the connections? chunk size like 2kb,4kb,8kb ? is there a way i can check this setting?<BR /><BR />Also, Is there any logic at Splunk to make sure that the record has been read&nbsp; completely on the connection?&nbsp;&nbsp;</P><P>&nbsp;</P> Mon, 21 Sep 2020 18:11:23 GMT https://community.splunk.com/t5/Getting-Data-In/Is-there-any-chunk-size-applied-while-reading-the-data-on-the/m-p/520673#M87997 chair56 2020-09-21T18:11:23Z https://community.splunk.com/t5/Getting-Data-In/Is-there-any-chunk-size-applied-while-reading-the-data-on-the/m-p/520709#M88000 <P>How is the data being read?&nbsp; It sounds like maybe a TCP or UDP connection.&nbsp; If so, stop everything and read&nbsp;<A href="http://www.georgestarcher.com/splunk-success-with-syslog/" target="_blank">http://www.georgestarcher.com/splunk-success-with-syslog/</A></P><P>If that is not the case then please describe your architecture and how the input is defined.</P> Tue, 22 Sep 2020 01:02:20 GMT https://community.splunk.com/t5/Getting-Data-In/Is-there-any-chunk-size-applied-while-reading-the-data-on-the/m-p/520709#M88000 richgalloway 2020-09-22T01:02:20Z