https://community.splunk.com/t5/Getting-Data-In/Can-I-forward-logs-from-a-Heavy-Forwarder-in-JSON-format-to/m-p/587883#M103224 <P>I wanted to ask if it was easy or possible to forward logs if some may be in text format from a HF to another device and send in JSON format?</P> Mon, 07 Mar 2022 16:10:25 GMT robnewman666 2022-03-07T16:10:25Z https://community.splunk.com/t5/Getting-Data-In/Can-I-forward-logs-from-a-Heavy-Forwarder-in-JSON-format-to/m-p/587883#M103224 <P>I wanted to ask if it was easy or possible to forward logs if some may be in text format from a HF to another device and send in JSON format?</P> Mon, 07 Mar 2022 16:10:25 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-forward-logs-from-a-Heavy-Forwarder-in-JSON-format-to/m-p/587883#M103224 robnewman666 2022-03-07T16:10:25Z https://community.splunk.com/t5/Getting-Data-In/Can-I-forward-logs-from-a-Heavy-Forwarder-in-JSON-format-to/m-p/587907#M103225 <P>Splunk supports forwarding data in raw form or in syslog form, but not JSON.&nbsp; See <A href="https://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Forwarddatatothird-partysystemsd" target="_blank">https://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Forwarddatatothird-partysystemsd</A></P><P>Go to&nbsp;<A href="https://ideas.splunk.com" target="_blank">https://ideas.splunk.com</A>&nbsp;to suggest they support JSON.</P> Mon, 07 Mar 2022 18:46:35 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-forward-logs-from-a-Heavy-Forwarder-in-JSON-format-to/m-p/587907#M103225 richgalloway 2022-03-07T18:46:35Z https://community.splunk.com/t5/Getting-Data-In/Can-I-forward-logs-from-a-Heavy-Forwarder-in-JSON-format-to/m-p/587918#M103226 <P>Thanks very much. <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Mon, 07 Mar 2022 22:25:57 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-forward-logs-from-a-Heavy-Forwarder-in-JSON-format-to/m-p/587918#M103226 robnewman666 2022-03-07T22:25:57Z