<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Splunk &amp;quot;sendall&amp;quot; command only uploading partial data... in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Splunk-quot-sendall-quot-command-only-uploading-partial-data/m-p/443900#M95419</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;

&lt;P&gt;Due to some data streaming issue from our source, I am trying to recover our large data and sent the decoded results to Splunk.&lt;BR /&gt;
However, when I send the data to Splunk some percent of events fails to be uploaded. For example, when I try to upload 217177 events I only get 215438 events successfully uploaded. This is not a data size issue. When I try to upload something smaller like 100k events only 99994 get through.&lt;/P&gt;

&lt;P&gt;Here is the commands I am using to upload the events:&lt;BR /&gt;
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)&lt;BR /&gt;
s.connect((HOST, PORT))&lt;BR /&gt;
......&lt;BR /&gt;
myRef= s.sendall(splunkString + '\n')&lt;/P&gt;

&lt;P&gt;Can anyone suggest a fix?&lt;/P&gt;

&lt;P&gt;Many thanks!&lt;BR /&gt;
Pelin&lt;/P&gt;</description>
    <pubDate>Tue, 29 Sep 2020 23:43:35 GMT</pubDate>
    <dc:creator>pkurt</dc:creator>
    <dc:date>2020-09-29T23:43:35Z</dc:date>
    <item>
      <title>Splunk "sendall" command only uploading partial data...</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Splunk-quot-sendall-quot-command-only-uploading-partial-data/m-p/443900#M95419</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;

&lt;P&gt;Due to some data streaming issue from our source, I am trying to recover our large data and sent the decoded results to Splunk.&lt;BR /&gt;
However, when I send the data to Splunk some percent of events fails to be uploaded. For example, when I try to upload 217177 events I only get 215438 events successfully uploaded. This is not a data size issue. When I try to upload something smaller like 100k events only 99994 get through.&lt;/P&gt;

&lt;P&gt;Here is the commands I am using to upload the events:&lt;BR /&gt;
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)&lt;BR /&gt;
s.connect((HOST, PORT))&lt;BR /&gt;
......&lt;BR /&gt;
myRef= s.sendall(splunkString + '\n')&lt;/P&gt;

&lt;P&gt;Can anyone suggest a fix?&lt;/P&gt;

&lt;P&gt;Many thanks!&lt;BR /&gt;
Pelin&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 23:43:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Splunk-quot-sendall-quot-command-only-uploading-partial-data/m-p/443900#M95419</guid>
      <dc:creator>pkurt</dc:creator>
      <dc:date>2020-09-29T23:43:35Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk "sendall" command only uploading partial data...</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Splunk-quot-sendall-quot-command-only-uploading-partial-data/m-p/443901#M95420</link>
      <description>&lt;P&gt;resolved....&lt;/P&gt;</description>
      <pubDate>Tue, 19 Mar 2019 03:06:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Splunk-quot-sendall-quot-command-only-uploading-partial-data/m-p/443901#M95420</guid>
      <dc:creator>pkurt</dc:creator>
      <dc:date>2019-03-19T03:06:08Z</dc:date>
    </item>
  </channel>
</rss>

