Splunk Dev

Log Storage in Intermediate(Relay) Forwarder


When the relay forwarder (UF) receives the log data from each target device and sends it to the indexer, will it store the log data on the relay forwarder?

How much disk space does it need for temporary storage?

Tags (1)
0 Karma

Ultra Champion

no it will not
however, you can setup persistent queue
read here:

hope it helps

0 Karma
Get Updates on the Splunk Community!

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Using the Splunk Threat Research Team’s Latest Security Content

REGISTER HERE Tech Talk | Security Edition Did you know the Splunk Threat Research Team regularly releases ...