https://community.splunk.com/t5/Getting-Data-In/routing-tcp-data/m-p/59207#M11668 <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.4/Deploy/Routeandfilterdatad">Everything you need</A></P> <P>_TCP_ROUTING is not mutually exclusive to indexing.</P> Wed, 11 Sep 2013 12:58:17 GMT jonuwz 2013-09-11T12:58:17Z https://community.splunk.com/t5/Getting-Data-In/routing-tcp-data/m-p/59206#M11667 <P>Hi,</P> <P>How would I route raw data via tcp to an external system (based upon sourcetype or host), but also index that data (and all other data being processed by that splunk forwarder)? I don't see any examples of doing both.</P> Tue, 10 Sep 2013 17:16:39 GMT https://community.splunk.com/t5/Getting-Data-In/routing-tcp-data/m-p/59206#M11667 a212830 2013-09-10T17:16:39Z https://community.splunk.com/t5/Getting-Data-In/routing-tcp-data/m-p/59207#M11668 <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.4/Deploy/Routeandfilterdatad">Everything you need</A></P> <P>_TCP_ROUTING is not mutually exclusive to indexing.</P> Wed, 11 Sep 2013 12:58:17 GMT https://community.splunk.com/t5/Getting-Data-In/routing-tcp-data/m-p/59207#M11668 jonuwz 2013-09-11T12:58:17Z