https://community.splunk.com/t5/Splunk-Enterprise/SPlunk-forwarding-UF-data-at-the-Heavy-Forward-to-a-syslog/m-p/353109#M7854 <P>I need to forward UF data from windows/Linux Universal Forwarders to a syslog server for a thrid party vendor. I was told that the Heavy Forwarder could split the Splunk stream and forward UF data to a Syslog Server. </P> Mon, 23 Apr 2018 19:18:24 GMT jmcclure 2018-04-23T19:18:24Z https://community.splunk.com/t5/Splunk-Enterprise/SPlunk-forwarding-UF-data-at-the-Heavy-Forward-to-a-syslog/m-p/353109#M7854 <P>I need to forward UF data from windows/Linux Universal Forwarders to a syslog server for a thrid party vendor. I was told that the Heavy Forwarder could split the Splunk stream and forward UF data to a Syslog Server. </P> Mon, 23 Apr 2018 19:18:24 GMT https://community.splunk.com/t5/Splunk-Enterprise/SPlunk-forwarding-UF-data-at-the-Heavy-Forward-to-a-syslog/m-p/353109#M7854 jmcclure 2018-04-23T19:18:24Z https://community.splunk.com/t5/Splunk-Enterprise/SPlunk-forwarding-UF-data-at-the-Heavy-Forward-to-a-syslog/m-p/353110#M7855 <P>Yes, do it like this:<BR /> <A href="https://docs.splunk.com/Documentation/Splunk/7.0.3/Admin/Outputsconf#IndexAndForward_Processor">https://docs.splunk.com/Documentation/Splunk/7.0.3/Admin/Outputsconf#IndexAndForward_Processor</A></P> Mon, 23 Apr 2018 20:49:53 GMT https://community.splunk.com/t5/Splunk-Enterprise/SPlunk-forwarding-UF-data-at-the-Heavy-Forward-to-a-syslog/m-p/353110#M7855 woodcock 2018-04-23T20:49:53Z