DevOps & Observability
DevOps, AppDev, and tool-chains, oh my!

Splunk JAVA logging missing events

eylonronen
Explorer

Hello all. I use splunk-library-javalogging to write my spring app logs to splunk but it seems that about 30% of the logs i write arent indexed...

 

It has nothing to do with the forwarder for sure (to which i send the logs to with HEC)

 

I noticed that when setting batch_size_count to 1 it gets better but not enough and when raising it to 100 it gets far worse.

 

Thank you very much

 

 

 

 

 

 

0 Karma

HoardingIO
Splunk Employee
Splunk Employee

Hello. Thank you for your question. This is more of a platform related question. I suggest re-posting in Development  (https://community.splunk.com/t5/Splunk-Development/ct-p/developer-tools) or Platform (https://community.splunk.com/t5/Splunk-Platform-Products/ct-p/core-products) communities

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...