How much data can the heavy forwarder handle?
I don't find reference
Hi @hanilena,
there isn't any indication, but if you're speaking of concentrator of other Universal Forwarders, there isn't any problem because UFs locally cache data so you don't loose data.
the problem could be with syslogs, for this reason I prefer to use a Universal Forwarder using rsyslog to receive syslogs.
Anyway, you can monitor HF queues (using the Monitoring Console or dedicated searches) and identify if there's some problem, in this case you have to enlarge the max queues values.
Ciao.
giuseppe
Then only answers you can get that can be relatively thruthful is "as much as it can before clogging up". There are so many different input types and so many different things you can do at input stage that there is no single value that can be given here. Not to mention of course different specs that you can assign to the HF machine.
You'd have to be way, way more specific here.