topic Re: Forwarding data in Getting Data In

Forwarding data

SplunkBaby — Wed, 05 Feb 2014 07:28:49 GMT

I have a splunk instance and I use splunk DB connect to read data from database.
Is it possible to forward this data to another splunk instance installed in another machine using forwarder?

Re: Forwarding data

MuS — Wed, 05 Feb 2014 07:46:17 GMT

Hi SplunkBaby,

you don't need another forwarder for this. You can use your Splunk instance and setup index and forward on it.

hope this helps ...

cheers, MuS

Re: Forwarding data

SplunkBaby — Mon, 28 Sep 2020 15:48:27 GMT

I have did the below things on output.cong.
[indexAndForward]
index=true
selectiveIndexing=true

[tcpout:group1]
server=10.203.246.71:9997
and in input.config
[monitor:///dbmon-dump://OracleDev/TestME]
_INDEX_AND_FORWARD_ROUTING=local
_TCP_ROUTING=group1

I am not getting the data in 10.203.246.71.I have enabled 9997 for data receiving.
still i am not getting data.
In metrics.log i find below info.
StatusMgr - destPort=9997, eventType=connect_done, sourceHost=10.203.246.71, sourceIp=10.203.246.71, sourcePort=50248, statusee=TcpInputProcessor

Can anybody help.