A few question about PQ
A few question about PQ: Customer is performing a data center move. There backend will be unavailable for a few hours. Therefore, the customer wants to utilize PQ in Cribl. He needs to enable PQ first. Is there an option to globally enable or disable PQ? (There doesn't seem to be a button, but perhaps a simple API solution?) Is there an option to enable or disable PQ for all sources under the same "technology"? For example, all Syslog sources. What is better, source PQ or dest PQ? For destination PQ it is set once (he has only one destination for all sources), will it have an impact when destination comes back online? Would Source PQ be better for Cribl? Should both be set? What happens when PQ will be disabled? Will the data still in PQ be sent, or will it stay there forever?