topic Re: If I POST events to a heavy forwarder using the REST API receivers/simple web service, will the HF be able to parse and forward the data? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/If-I-POST-events-to-a-heavy-forwarder-using-the-REST-API/m-p/230765#M44924 <P>Yes, if you configure your heavy forwarder to forward data to an indexer, it will forward any data it receives, regardless if that data is received via the HTTP event collector, a port configured as an input, or through a monitor or script stanza.</P> <P>Here's some information on forwarder topologies:<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.3.3/Forwarding/Forwarderdeploymenttopologies">http://docs.splunk.com/Documentation/Splunk/6.3.3/Forwarding/Forwarderdeploymenttopologies</A></P> <P>And event collector topologies:<BR /> <A href="http://dev.splunk.com/view/event-collector/SP-CAAAE73">http://dev.splunk.com/view/event-collector/SP-CAAAE73</A></P> Fri, 04 Mar 2016 20:26:45 GMT Jeremiah 2016-03-04T20:26:45Z If I POST events to a heavy forwarder using the REST API receivers/simple web service, will the HF be able to parse and forward the data? https://community.splunk.com/t5/Getting-Data-In/If-I-POST-events-to-a-heavy-forwarder-using-the-REST-API/m-p/230764#M44923 <P>If I POST events to a Heavy Forwarder using the receivers/simple web service, will the Forwarder then be able to parse and forward the data? Is this standard behavior when using the REST API?</P> <P>I want to do this because I have Forwarders on-premise that forward to Indexers in the cloud. I would like to keep the same pattern for these events rather than bypassing the on-premise Forwarders.</P> Thu, 03 Mar 2016 10:05:35 GMT https://community.splunk.com/t5/Getting-Data-In/If-I-POST-events-to-a-heavy-forwarder-using-the-REST-API/m-p/230764#M44923 csmartin 2016-03-03T10:05:35Z Re: If I POST events to a heavy forwarder using the REST API receivers/simple web service, will the HF be able to parse and forward the data? https://community.splunk.com/t5/Getting-Data-In/If-I-POST-events-to-a-heavy-forwarder-using-the-REST-API/m-p/230765#M44924 <P>Yes, if you configure your heavy forwarder to forward data to an indexer, it will forward any data it receives, regardless if that data is received via the HTTP event collector, a port configured as an input, or through a monitor or script stanza.</P> <P>Here's some information on forwarder topologies:<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.3.3/Forwarding/Forwarderdeploymenttopologies">http://docs.splunk.com/Documentation/Splunk/6.3.3/Forwarding/Forwarderdeploymenttopologies</A></P> <P>And event collector topologies:<BR /> <A href="http://dev.splunk.com/view/event-collector/SP-CAAAE73">http://dev.splunk.com/view/event-collector/SP-CAAAE73</A></P> Fri, 04 Mar 2016 20:26:45 GMT https://community.splunk.com/t5/Getting-Data-In/If-I-POST-events-to-a-heavy-forwarder-using-the-REST-API/m-p/230765#M44924 Jeremiah 2016-03-04T20:26:45Z Re: If I POST events to a heavy forwarder using the REST API receivers/simple web service, will the HF be able to parse and forward the data? https://community.splunk.com/t5/Getting-Data-In/If-I-POST-events-to-a-heavy-forwarder-using-the-REST-API/m-p/230766#M44925 <P>many thanks Jeremiah</P> Mon, 07 Mar 2016 08:37:55 GMT https://community.splunk.com/t5/Getting-Data-In/If-I-POST-events-to-a-heavy-forwarder-using-the-REST-API/m-p/230766#M44925 csmartin 2016-03-07T08:37:55Z