https://community.splunk.com/t5/Getting-Data-In/Can-a-universal-forwarder-send-cooked-data-to-a-3rd-party/m-p/192797#M38470 <P>Hi a212830,</P> <P>Yes, it can. <STRONG>BUT</STRONG>:</P> <P>Even the universal forwarder can send to any kind of 3rd party receiver, it is most likely that this receiver will only see data babble.</P> <P>The parsed and unparsed formats are both referred as cooked data, to distinguish them from raw data. By default, forwarders send cooked data — in the universal forwarder's case, unparsed data, and in the heavy forwarder's case, parsed data.</P> <P>Therefore follow the docs on <A href="http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Forwarddatatothird-partysystemsd">Forward data to third-party systems</A></P> <P>cheers, MuS</P> Sat, 23 Aug 2014 07:04:22 GMT MuS 2014-08-23T07:04:22Z https://community.splunk.com/t5/Getting-Data-In/Can-a-universal-forwarder-send-cooked-data-to-a-3rd-party/m-p/192796#M38469 <P>Hi,</P> <P>Can the UFW send cooked data to a 3rd party receiver over tcp? </P> Fri, 22 Aug 2014 23:43:02 GMT https://community.splunk.com/t5/Getting-Data-In/Can-a-universal-forwarder-send-cooked-data-to-a-3rd-party/m-p/192796#M38469 a212830 2014-08-22T23:43:02Z https://community.splunk.com/t5/Getting-Data-In/Can-a-universal-forwarder-send-cooked-data-to-a-3rd-party/m-p/192797#M38470 <P>Hi a212830,</P> <P>Yes, it can. <STRONG>BUT</STRONG>:</P> <P>Even the universal forwarder can send to any kind of 3rd party receiver, it is most likely that this receiver will only see data babble.</P> <P>The parsed and unparsed formats are both referred as cooked data, to distinguish them from raw data. By default, forwarders send cooked data — in the universal forwarder's case, unparsed data, and in the heavy forwarder's case, parsed data.</P> <P>Therefore follow the docs on <A href="http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Forwarddatatothird-partysystemsd">Forward data to third-party systems</A></P> <P>cheers, MuS</P> Sat, 23 Aug 2014 07:04:22 GMT https://community.splunk.com/t5/Getting-Data-In/Can-a-universal-forwarder-send-cooked-data-to-a-3rd-party/m-p/192797#M38470 MuS 2014-08-23T07:04:22Z https://community.splunk.com/t5/Getting-Data-In/Can-a-universal-forwarder-send-cooked-data-to-a-3rd-party/m-p/192798#M38471 <P>OK, so it sounds like cooked data is splunk-to-splunk communication and raw data is for other 3rd party systems?</P> Mon, 25 Aug 2014 01:24:45 GMT https://community.splunk.com/t5/Getting-Data-In/Can-a-universal-forwarder-send-cooked-data-to-a-3rd-party/m-p/192798#M38471 a212830 2014-08-25T01:24:45Z https://community.splunk.com/t5/Getting-Data-In/Can-a-universal-forwarder-send-cooked-data-to-a-3rd-party/m-p/192799#M38472 <P>Yes, that is correct.</P> Mon, 25 Aug 2014 06:29:33 GMT https://community.splunk.com/t5/Getting-Data-In/Can-a-universal-forwarder-send-cooked-data-to-a-3rd-party/m-p/192799#M38472 Ayn 2014-08-25T06:29:33Z