Hello,
I need help on understanding something.
If I have a folder being monitored by a universal forwarder and I lose the connectivity between the universal forwarder and the indexer. Does that cause the loss of all the data that arrives on the monitored folder during connection loss time ?
Do i need to use Ack to ensure that universal ?
In which case do I need to have Ack enabled ? It's only when i have streams/scripts arriving on the forwarder without storing the results on disk right ?
Regards,
David