If there is a environment like below, if Indexer is down, the data will be lost?
*HF with `Splunk DB Connect`
*Indexer
I think data input like "file monitor","data from other Universal Forwarder" etc will stop, if indexer is down, so the data won't be lost.
But I have to configure `persistent queue` to avoid data lost, if I use data input such "TCP","scripted input".
which type is data input of `Splunk DB Connet`?
Do I have to configure `persistent queue`?
Or `Splunk DB Connet` automatically stop, if outputqueue is filled?
If someone know about it , please tell me.
↧