https://community.splunk.com/t5/Getting-Data-In/How-can-I-forward-old-data-to-3rd-party-systems/m-p/258348#M49621 <P>You have several options...</P> <P>Cold to frozen script &lt;- will push data being deleted due to age / size to third party<BR /> ODBC Connector &lt;- will allow you to pull data out of splunk and into third party system<BR /> Custom REST script &lt;- will allow you to pull data out of splunk and into third party system</P> Thu, 19 May 2016 12:20:07 GMT jkat54 2016-05-19T12:20:07Z https://community.splunk.com/t5/Getting-Data-In/How-can-I-forward-old-data-to-3rd-party-systems/m-p/258347#M49620 <P>I referred to the document as shown in <A href="http://docs.splunk.com/Documentation/Splunk/6.4.1/Forwarding/Forwarddatatothird-partysystemsd">http://docs.splunk.com/Documentation/Splunk/6.4.1/Forwarding/Forwarddatatothird-partysystemsd</A></P> <P>I can forward the new data which are first indexed to 3rd-party systems, but the old data indexed before can't be forwarded</P> <P>How can I solve it?</P> <P>Thanks in advance.</P> Thu, 19 May 2016 12:06:43 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-forward-old-data-to-3rd-party-systems/m-p/258347#M49620 caili 2016-05-19T12:06:43Z https://community.splunk.com/t5/Getting-Data-In/How-can-I-forward-old-data-to-3rd-party-systems/m-p/258348#M49621 <P>You have several options...</P> <P>Cold to frozen script &lt;- will push data being deleted due to age / size to third party<BR /> ODBC Connector &lt;- will allow you to pull data out of splunk and into third party system<BR /> Custom REST script &lt;- will allow you to pull data out of splunk and into third party system</P> Thu, 19 May 2016 12:20:07 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-forward-old-data-to-3rd-party-systems/m-p/258348#M49621 jkat54 2016-05-19T12:20:07Z