<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Data indexed via REST API then forwarded on to another Indexer in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Data-indexed-via-REST-API-then-forwarded-on-to-another-Indexer/m-p/49918#M9485</link>
    <description>&lt;P&gt;The answer is , yes you can &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;Just pumped some test data in using the new Java SDK, and outputs.conf routed the event into my Indexer cluster.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;Service service = new Service("myhost", 8089);
service.login("admin", "notmyrealpass");       
RequestMessage request = new RequestMessage();
request.setContent("testing java sdk");
ResponseMessage response = service.send("receivers/simple?index=testing&amp;amp;source=sdk&amp;amp;sourcetype=sdk_testing", request);
System.out.println(response.getStatus() == 200?"Success":"Failure");
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Wed, 18 Jan 2012 01:23:34 GMT</pubDate>
    <dc:creator>Damien_Dallimor</dc:creator>
    <dc:date>2012-01-18T01:23:34Z</dc:date>
    <item>
      <title>Data indexed via REST API then forwarded on to another Indexer</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Data-indexed-via-REST-API-then-forwarded-on-to-another-Indexer/m-p/49917#M9484</link>
      <description>&lt;P&gt;If data is being indexed via the Rest API "services/receivers/simple" endpoint vs an entry in inputs.conf , can I still then use outputs.conf to forward the data onto another Indexer ?&lt;/P&gt;</description>
      <pubDate>Thu, 12 Jan 2012 21:16:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Data-indexed-via-REST-API-then-forwarded-on-to-another-Indexer/m-p/49917#M9484</guid>
      <dc:creator>Damien_Dallimor</dc:creator>
      <dc:date>2012-01-12T21:16:41Z</dc:date>
    </item>
    <item>
      <title>Re: Data indexed via REST API then forwarded on to another Indexer</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Data-indexed-via-REST-API-then-forwarded-on-to-another-Indexer/m-p/49918#M9485</link>
      <description>&lt;P&gt;The answer is , yes you can &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;Just pumped some test data in using the new Java SDK, and outputs.conf routed the event into my Indexer cluster.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;Service service = new Service("myhost", 8089);
service.login("admin", "notmyrealpass");       
RequestMessage request = new RequestMessage();
request.setContent("testing java sdk");
ResponseMessage response = service.send("receivers/simple?index=testing&amp;amp;source=sdk&amp;amp;sourcetype=sdk_testing", request);
System.out.println(response.getStatus() == 200?"Success":"Failure");
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Wed, 18 Jan 2012 01:23:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Data-indexed-via-REST-API-then-forwarded-on-to-another-Indexer/m-p/49918#M9485</guid>
      <dc:creator>Damien_Dallimor</dc:creator>
      <dc:date>2012-01-18T01:23:34Z</dc:date>
    </item>
    <item>
      <title>Re: Data indexed via REST API then forwarded on to another Indexer</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Data-indexed-via-REST-API-then-forwarded-on-to-another-Indexer/m-p/49919#M9486</link>
      <description>&lt;P&gt;It's great to know this is possible, but please could you clarify what you put in outputs.conf.  Did you have to rely on the defaultGroup setting in the [tcpout] stanza, or do you know a way to have data added using the REST API forwarded using a specific target group other than the default one in outputs.conf?&lt;/P&gt;</description>
      <pubDate>Mon, 04 Mar 2013 17:09:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Data-indexed-via-REST-API-then-forwarded-on-to-another-Indexer/m-p/49919#M9486</guid>
      <dc:creator>dmr195</dc:creator>
      <dc:date>2013-03-04T17:09:23Z</dc:date>
    </item>
  </channel>
</rss>

