Getting Data In

Backoff setting of universal forwarder

yuwtennis
Communicator

Hi!

I would like to ask question for the backoff setting with universal forwarder.

According to the document , if useACK option is set blocks can be resend if
a network failure occurs.

http://docs.splunk.com/Documentation/Splunk/6.0/Forwarding/Protectagainstlossofin-flightdata

However, in the ouputs.conf , useACK option is not required if you want to confiure the backoff
setting.

Is a backoff setting default function for the forwarder?

Thanks,
Yu

0 Karma

MHibbin
Influencer

I would configure this setting to true and following the backoff setting in the outputs.conf.spec file:

http://docs.splunk.com/Documentation/Splunk/6.0/Admin/Outputsconf

0 Karma

yuwtennis
Communicator

Hi!

Is both setting required?

Thanks.

0 Karma
Get Updates on the Splunk Community!

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...