We did not find any parser error for the given timeframe.
Although, the team did notice that some of the logs were "forwarded" delayed by 3 hours, while others were forwarded at the same time. Therefore, even in splunk we see some of the missing logs available outside the actual tomcat server test run timeframe.
For e.g. In tomcat all the logs are seen between 4:30 to 4:35 pm, while in splunk the log statements are divided like below:
4:32 to 4:35 p.m. - statements 1-4, 10-15
6:30 - statements 5-8, and so on..
... View more