https://community.splunk.com/t5/Getting-Data-In/How-to-implement-data-diode-like-forwarding-between-two-distinct/m-p/173196#M34833 <P>Our customer would like to deploy two Splunk instances. The first instance would be in an open network and the another one would be in a highly protected network. No data is allowed to leave the protected network. From the open network, some data flow (on UDP protocol) is allowed to reach the protected network.<BR /> The customer would like to forward some interesting events from a Splunk indexer found in the open network to another Splunk indexer found in the protected network. So they would like to implement a data diode-like (unidirectional network) behaviour.</P> <P>What is the best and safe way to achieve this?</P> Thu, 13 Aug 2015 15:15:28 GMT ngiczi 2015-08-13T15:15:28Z https://community.splunk.com/t5/Getting-Data-In/How-to-implement-data-diode-like-forwarding-between-two-distinct/m-p/173196#M34833 <P>Our customer would like to deploy two Splunk instances. The first instance would be in an open network and the another one would be in a highly protected network. No data is allowed to leave the protected network. From the open network, some data flow (on UDP protocol) is allowed to reach the protected network.<BR /> The customer would like to forward some interesting events from a Splunk indexer found in the open network to another Splunk indexer found in the protected network. So they would like to implement a data diode-like (unidirectional network) behaviour.</P> <P>What is the best and safe way to achieve this?</P> Thu, 13 Aug 2015 15:15:28 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-implement-data-diode-like-forwarding-between-two-distinct/m-p/173196#M34833 ngiczi 2015-08-13T15:15:28Z https://community.splunk.com/t5/Getting-Data-In/How-to-implement-data-diode-like-forwarding-between-two-distinct/m-p/173197#M34834 <P>Take a look <A href="http://answers.splunk.com/answers/203547/index-and-forward-data-into-another-splunk-instanc.html">here</A> for the general approach on how to index and forward. The only issue here is if UDP is your only protocol choice, that will not work since the Splunk-2-Splunk link will require TCP.</P> Thu, 13 Aug 2015 20:07:40 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-implement-data-diode-like-forwarding-between-two-distinct/m-p/173197#M34834 s2_splunk 2015-08-13T20:07:40Z