<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Can we use REST API instead of Universal Forwarder to send logs to indexer, if so, How can we do that? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Can-we-use-REST-API-instead-of-Universal-Forwarder-to-send-logs/m-p/403575#M71696</link>
    <description>&lt;P&gt;Hey,&lt;BR /&gt;
the best way to do this is the Splunk HTTP Event Collector. It's a HTTP(S) API, that you can send your events to.&lt;BR /&gt;
There is a lot to be considered for this, but the documents explain it pretty well. Check this:&lt;/P&gt;

&lt;P&gt;&lt;A href="https://docs.splunk.com/Documentation/Splunk/7.1.0/Data/UsetheHTTPEventCollector"&gt;Set up and use HTTP Event Collector in Splunk Web&lt;/A&gt; &lt;BR /&gt;
&lt;A href="http://dev.splunk.com/view/event-collector/SP-CAAAE6M"&gt;Introduction to Splunk HTTP Event Collector&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;Hope that helps - if it does I'd be happy if you would upvote/accept this answer, so others could profit from it. &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
    <pubDate>Fri, 18 May 2018 07:14:39 GMT</pubDate>
    <dc:creator>xpac</dc:creator>
    <dc:date>2018-05-18T07:14:39Z</dc:date>
    <item>
      <title>Can we use REST API instead of Universal Forwarder to send logs to indexer, if so, How can we do that?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Can-we-use-REST-API-instead-of-Universal-Forwarder-to-send-logs/m-p/403574#M71695</link>
      <description>&lt;P&gt;How can we send the logs through REST API without using the Universal forwarder on the application server or any sources&lt;/P&gt;</description>
      <pubDate>Fri, 18 May 2018 03:14:55 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Can-we-use-REST-API-instead-of-Universal-Forwarder-to-send-logs/m-p/403574#M71695</guid>
      <dc:creator>saicool</dc:creator>
      <dc:date>2018-05-18T03:14:55Z</dc:date>
    </item>
    <item>
      <title>Re: Can we use REST API instead of Universal Forwarder to send logs to indexer, if so, How can we do that?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Can-we-use-REST-API-instead-of-Universal-Forwarder-to-send-logs/m-p/403575#M71696</link>
      <description>&lt;P&gt;Hey,&lt;BR /&gt;
the best way to do this is the Splunk HTTP Event Collector. It's a HTTP(S) API, that you can send your events to.&lt;BR /&gt;
There is a lot to be considered for this, but the documents explain it pretty well. Check this:&lt;/P&gt;

&lt;P&gt;&lt;A href="https://docs.splunk.com/Documentation/Splunk/7.1.0/Data/UsetheHTTPEventCollector"&gt;Set up and use HTTP Event Collector in Splunk Web&lt;/A&gt; &lt;BR /&gt;
&lt;A href="http://dev.splunk.com/view/event-collector/SP-CAAAE6M"&gt;Introduction to Splunk HTTP Event Collector&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;Hope that helps - if it does I'd be happy if you would upvote/accept this answer, so others could profit from it. &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 18 May 2018 07:14:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Can-we-use-REST-API-instead-of-Universal-Forwarder-to-send-logs/m-p/403575#M71696</guid>
      <dc:creator>xpac</dc:creator>
      <dc:date>2018-05-18T07:14:39Z</dc:date>
    </item>
  </channel>
</rss>

