https://community.splunk.com/t5/Getting-Data-In/What-is-aggregation-in-Splunk/m-p/413491#M73151 <P>I am not quite sure what you want since the data provided are very limited.</P> <P>But it seems like you want your data of one Splunk instance to be copied to another Splunk instance.<BR /> This can be done by indexer clustering.</P> <P>Check out the below link it might help you out.</P> <P><A href="https://docs.splunk.com/Documentation/Splunk/7.3.0/Indexer/Basicclusterarchitecture">https://docs.splunk.com/Documentation/Splunk/7.3.0/Indexer/Basicclusterarchitecture</A></P> Thu, 25 Jul 2019 09:22:33 GMT chinmoya 2019-07-25T09:22:33Z https://community.splunk.com/t5/Getting-Data-In/What-is-aggregation-in-Splunk/m-p/413490#M73150 <P>The instruction of my project is: All local event logs must be duplicated to Splunk for events aggregation. In addition, I must aggregate events from one Centos 7 Virtual Machine to another Centos 7 virtual machine. I'm just new to Splunk and I don't quite understand what it means or how to even do it. </P> Thu, 25 Jul 2019 08:28:03 GMT https://community.splunk.com/t5/Getting-Data-In/What-is-aggregation-in-Splunk/m-p/413490#M73150 eitherlucas 2019-07-25T08:28:03Z https://community.splunk.com/t5/Getting-Data-In/What-is-aggregation-in-Splunk/m-p/413491#M73151 <P>I am not quite sure what you want since the data provided are very limited.</P> <P>But it seems like you want your data of one Splunk instance to be copied to another Splunk instance.<BR /> This can be done by indexer clustering.</P> <P>Check out the below link it might help you out.</P> <P><A href="https://docs.splunk.com/Documentation/Splunk/7.3.0/Indexer/Basicclusterarchitecture">https://docs.splunk.com/Documentation/Splunk/7.3.0/Indexer/Basicclusterarchitecture</A></P> Thu, 25 Jul 2019 09:22:33 GMT https://community.splunk.com/t5/Getting-Data-In/What-is-aggregation-in-Splunk/m-p/413491#M73151 chinmoya 2019-07-25T09:22:33Z