https://community.splunk.com/t5/Splunk-Cloud-Platform/splunk-Universal-forwarder/m-p/547782#M626 <P>Is the data that is sent from a splunk Universal Forwarder to the heavy forwarder, syslog messages?&nbsp; If so, how do I find out which format it is using (ie: syslog-ng)</P> Tue, 13 Apr 2021 18:46:43 GMT iherb_0718 2021-04-13T18:46:43Z https://community.splunk.com/t5/Splunk-Cloud-Platform/splunk-Universal-forwarder/m-p/547782#M626 <P>Is the data that is sent from a splunk Universal Forwarder to the heavy forwarder, syslog messages?&nbsp; If so, how do I find out which format it is using (ie: syslog-ng)</P> Tue, 13 Apr 2021 18:46:43 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/splunk-Universal-forwarder/m-p/547782#M626 iherb_0718 2021-04-13T18:46:43Z https://community.splunk.com/t5/Splunk-Cloud-Platform/splunk-Universal-forwarder/m-p/547825#M627 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/229889">@iherb_0718</a>,</P><P>Splunk instances data communication is called S2S (Splunk to Splunk) are proprietary TCP communications. They are not syslog.&nbsp;</P> Wed, 14 Apr 2021 03:47:06 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/splunk-Universal-forwarder/m-p/547825#M627 scelikok 2021-04-14T03:47:06Z