logstash configurations for sending data to splunk through tcp

mohan401 — Mon, 19 Nov 2018 04:26:48 GMT

Hi All,

I am using rsyslog and logstash agent to forward data to splunk. I am able to send data through tcp from rsyslog but I am not able to using logstsh agent. Can you please help me on logstash configuration to fwd data to splunk.

logstash config

input{
pipe{
Appid => "XXXX"
path => "/path/script.sh"
}

output{

tcp
{
host => "XXXXX.XXXX"
port => XXX
}
}

I have mentioned the above config as a sample.

topic logstash configurations for sending data to splunk through tcp in Getting Data In

logstash configurations for sending data to splunk through tcp