Getting Data In

Splunk 2 Splunk SSL Persistent Queues

ephemeric
Contributor

Am I just missing something or being stupid or are there no persistent queues when using Splunk2Splunk with SSL?

I see indexer acknowledgement in 4.2.1 but how does one protect against loss of in flight data over SSL and how does one (if possible) spool to disk if the intermediate forwarder or indexer are down?

1 Solution

ephemeric
Contributor

As per the docs this is not supported in this configuration.

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.