What would happen to logs being sent to Splunk when network is down?

[mayooran99]

What would happen to logs being sent to splunk from my Java application when there is a network failure? I'm sending data to splunk through my java application using TCP. Please advice. Does Splunk have any solutions for this?

[juvetm]

IN THIS CASE THE DATA MAY NOT ARRIVED AND DUE TO THIS SPLUNK MAY RECEIVE DATA DUE TO NETWORK FAILURE
the only problem is to have a good network that can help you to index your data that there no means that splunk can help since data are been using but network to index your data

[Ayn]

Splunk can't do anything about logs that doesn't reach it. In the case where you have Universal Forwarders sending logs to a Splunk indexer, the forwarders have buffering mechanisms to make sure that logs will not be lost in case of a (temporary) network failure. In your case, it's your Java application failing to send the logs, so it's up to that application to implement mechanisms for avoiding data loss.