You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When we log multiple events during the same millisecond the order that they're logged isn't maintained when viewing those events in Splunk. Note that we're using a batch_size_count (which should be batchSizeCount, but that's a different issue) of 1 since we want to increase the chance that all events get persisted to Splunk.
When we log multiple events during the same millisecond the order that they're logged isn't maintained when viewing those events in Splunk. Note that we're using a batch_size_count (which should be batchSizeCount, but that's a different issue) of 1 since we want to increase the chance that all events get persisted to Splunk.
logback.xml exhibiting the issue:
<configuration>
<appender name="splunk" class="com.splunk.logging.HttpEventCollectorLogbackAppender">
<url>${SPLUNK_URL}</url>
<token>${SPLUNK_TOKEN}</token>
<index>${SPLUNK_INDEX}</index>
<host>${SPLUNK_HOST}</host>
<connectTimeout>2000</connectTimeout>
<writeTimeout>1000</writeTimeout>
<batch_size_count>1</batch_size_count>
<includeMDC>false</includeMDC>
<includeThreadName>false</includeThreadName>
<layout class="ch.qos.logback.contrib.json.classic.JsonLayout">
<jsonFormatter class="ch.qos.logback.contrib.jackson.JacksonJsonFormatter">
<prettyPrint>false</prettyPrint>
</jsonFormatter>
<includeTimestamp>false</includeTimestamp>
<includeLevel>false</includeLevel>
<includeLoggerName>false</includeLoggerName>
<includeMDC>false</includeMDC>
<includeThreadName>false</includeThreadName>
<includeContextName>false</includeContextName>
</layout>
</appender>
<root level="info">
<appender-ref ref="splunk" />
</root>
</configuration>
`
The text was updated successfully, but these errors were encountered: