https://community.splunk.com/t5/Alerting/Oracle-alert-log-recycle/m-p/536363#M10129 <P>Also, same applies to listener.log as well.</P> Tue, 19 Jan 2021 18:17:17 GMT nil123 2021-01-19T18:17:17Z https://community.splunk.com/t5/Alerting/Oracle-alert-log-recycle/m-p/536362#M10128 <P>Hi,</P><P>I was able to send Oracle alert logs to splunk and do some basic searches.</P><P>However, I've one issue. What happens when we recycle alert log ?</P><P>On regular basis, we rename alert log file and compress it. The problem is, there is lag to transfer logs to splunk.</P><P>so when we rename alert log file, what is going to happen to log in splunk ?</P><P>we don't want to miss any data in log file and want to everything in alert log. How can i do that ?</P><P>I'm using universal forwarder and input.conf has filename, sourcetype...</P><P>Thanks.</P> Tue, 19 Jan 2021 18:13:57 GMT https://community.splunk.com/t5/Alerting/Oracle-alert-log-recycle/m-p/536362#M10128 nil123 2021-01-19T18:13:57Z https://community.splunk.com/t5/Alerting/Oracle-alert-log-recycle/m-p/536363#M10129 <P>Also, same applies to listener.log as well.</P> Tue, 19 Jan 2021 18:17:17 GMT https://community.splunk.com/t5/Alerting/Oracle-alert-log-recycle/m-p/536363#M10129 nil123 2021-01-19T18:17:17Z