buf_memory
buf_memory
, the buffered data is completely lost. This is a tradeoff for higher performance. Lowering the flush_interval
will reduce the probability of data loss, but will increase the number of transfers between forwarders and aggregators.buf_file
buf_file
, the buffered data is stored on the disk. After Fluentd recovers, it will try to send the buffered data to the destination again.buf_memory
, the aggregators will stop accepting new logs once they reach their buffer limits. If you are using buf_file
, the aggregators will continue accepting logs until they run out of disk space.