If you suspect a UF is dropping events or you're concerned about the possibility of it then turn on Indexer Acknowledgement. The acks will tell the UF when events are indexed. The UF will retransmit events that are not acknowledged.
If you suspect a UF is dropping events or you're concerned about the possibility of it then turn on Indexer Acknowledgement. The acks will tell the UF when events are indexed. The UF will retransmit events that are not acknowledged.
Thanks @richgalloway ,
UF generally pushes logs using TCP connection, so it gives reliability transportation layer, adding indexer ACK would add reliability at application layer right?
Since you haven't mentioned any such scenario, I'm considering there are no such known issues where events are dropped.