Hi,
I am using Universal Forwarder on a Mac configured to monitor a few log files. It is sending data fine, and it resumes sending data from those files after a disruption of the network.
The thing is, it is not sending the data written to the log files while the internet was off. Maybe it is caching the data elsewhere and not sending it?
Reading the documentation, I see that there is no persistent queue for the monitor input. Does that mean that the forward won't pause the parsing of a log file when it can't reach the server?
