https://community.splunk.com/t5/Getting-Data-In/How-to-forward-indexed-data-to-another-splunk-receiver/m-p/23155#M3628 <P>This looks good; did you configure the receiving side with something like this?</P> <PRE><CODE>[splunktcp://9997] connection_host = dns index = myindex sourcetype = mysourcetype </CODE></PRE> Wed, 03 Jun 2015 02:00:14 GMT woodcock 2015-06-03T02:00:14Z https://community.splunk.com/t5/Getting-Data-In/How-to-forward-indexed-data-to-another-splunk-receiver/m-p/23154#M3627 <P>Now I configured server A and B with installing splunk, and index some local logs on server A. I want to forward these logs to server B, and wrote some configure files in /opt/splunk/etc/system/local.</P> <PRE><CODE>props.conf: [&lt;sourcetype&gt;] TRANSFORMS-routing=send_to_windows transforms.conf: [send_to_windows] REGEX=. DEST_KEY=_TCP_ROUTING FORMAT=windowsgroup outputs.conf: [tcpout:windowsgroup] disable=fasle server=x.x.x.x:x </CODE></PRE> <P>The server A is configured as Splunk forwarder mode.The piont is there's no logs receiving on server B.</P> Sat, 08 Jan 2011 15:07:40 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-forward-indexed-data-to-another-splunk-receiver/m-p/23154#M3627 ford1863 2011-01-08T15:07:40Z https://community.splunk.com/t5/Getting-Data-In/How-to-forward-indexed-data-to-another-splunk-receiver/m-p/23155#M3628 <P>This looks good; did you configure the receiving side with something like this?</P> <PRE><CODE>[splunktcp://9997] connection_host = dns index = myindex sourcetype = mysourcetype </CODE></PRE> Wed, 03 Jun 2015 02:00:14 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-forward-indexed-data-to-another-splunk-receiver/m-p/23155#M3628 woodcock 2015-06-03T02:00:14Z