I see some of these time outs in the /var/log/splunk/splunk.log
Is this something I should be concerned about? Does the forwarder try a resend? Is this a potential data loss? or if there's a retry, does it handle the resend gracefully?
01-13-2012 01:52:56.098 +0000 INFO TcpOutputProc - Connected to idx=x.x.x.x:9997
01-13-2012 01:54:15.760 +0000 WARN TcpOutputProc - Cooked connection to ip=x.x.x.x:9997 timed out
01-13-2012 01:54:15.762 +0000 INFO TcpOutputProc - Connected to idx=x.x.x.x:9997
01-13-2012 01:54:45.592 +0000 WARN TcpOutputProc - Cooked connection to ip=x.x.x.x:9997 timed out
01-13-2012 01:55:15.423 +0000 WARN TcpOutputProc - Cooked connection to ip=x.x.x.x:9997 timed out
01-13-2012 01:55:15.424 +0000 INFO TcpOutputProc - Connected to idx=x.x.x.x:9997
01-13-2012 01:55:34.333 +0000 INFO TcpOutputProc - Connected to idx=x.x.x.x:9997
Thanks!
