https://community.splunk.com/t5/Getting-Data-In/How-to-forward-Windows-logs-from-a-Splunk-indexer-to-a-Syslog/m-p/138292#M28437 <P>Splunk sends multiline windows events (as in case of Syslog default log size) but do not offer any token to combine those multi-line logs. How can I tackle this?</P> Wed, 24 Sep 2014 09:06:15 GMT viverma5 2014-09-24T09:06:15Z https://community.splunk.com/t5/Getting-Data-In/How-to-forward-Windows-logs-from-a-Splunk-indexer-to-a-Syslog/m-p/138291#M28436 <P>Hi,</P> <P>We are collecting Windows logs from a universal forwarder in a Windows Splunk Indexer. Now, I want to collect those logs from the Splunk indexer in a SYSLOG server. Can I achieve this? </P> Wed, 24 Sep 2014 08:34:44 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-forward-Windows-logs-from-a-Splunk-indexer-to-a-Syslog/m-p/138291#M28436 viverma5 2014-09-24T08:34:44Z https://community.splunk.com/t5/Getting-Data-In/How-to-forward-Windows-logs-from-a-Splunk-indexer-to-a-Syslog/m-p/138292#M28437 <P>Splunk sends multiline windows events (as in case of Syslog default log size) but do not offer any token to combine those multi-line logs. How can I tackle this?</P> Wed, 24 Sep 2014 09:06:15 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-forward-Windows-logs-from-a-Splunk-indexer-to-a-Syslog/m-p/138292#M28437 viverma5 2014-09-24T09:06:15Z https://community.splunk.com/t5/Getting-Data-In/How-to-forward-Windows-logs-from-a-Splunk-indexer-to-a-Syslog/m-p/138293#M28438 <P>If what you're saying is that you want to pass the Windows log data collected in Splunk on to another application like syslog, then I don't think Splunk is engineered to do that; it takes data in and indexes it, but doesn't really have a way to forward it on to other apps. I believe you would do better to configure Windows to pass the data directly to syslog, not through Splunk, especially if Splunk is running on Windows too.</P> Sun, 28 Sep 2014 01:59:43 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-forward-Windows-logs-from-a-Splunk-indexer-to-a-Syslog/m-p/138293#M28438 pmdba 2014-09-28T01:59:43Z https://community.splunk.com/t5/Getting-Data-In/How-to-forward-Windows-logs-from-a-Splunk-indexer-to-a-Syslog/m-p/138294#M28439 <P>Splunk can do that. Please see: <BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.2.0/Forwarding/Forwarddatatothird-partysystemsd">http://docs.splunk.com/Documentation/Splunk/6.2.0/Forwarding/Forwarddatatothird-partysystemsd</A></P> Fri, 31 Oct 2014 19:55:47 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-forward-Windows-logs-from-a-Splunk-indexer-to-a-Syslog/m-p/138294#M28439 mzax 2014-10-31T19:55:47Z