https://community.splunk.com/t5/Getting-Data-In/Forward-Data/m-p/126532#M97731 <P>You can route specific events to other Splunk instances, and/or index them locally on the Splunk instances you're routing the events from. See more here: <A href="http://docs.splunk.com/Documentation/Splunk/6.0/Forwarding/Routeandfilterdatad">http://docs.splunk.com/Documentation/Splunk/6.0/Forwarding/Routeandfilterdatad</A></P> Mon, 27 Jan 2014 15:30:54 GMT Ayn 2014-01-27T15:30:54Z https://community.splunk.com/t5/Getting-Data-In/Forward-Data/m-p/126531#M97730 <P>I need to index data from an appliance we have, however in the appliance you can only specify one syslog server. How can I index the data on our central instance and then forward the data on to a separate heavy forwarder? </P> <P>We basically have two separate Splunk instances so I need to figure out how to get the data to both of them.</P> Mon, 27 Jan 2014 15:24:20 GMT https://community.splunk.com/t5/Getting-Data-In/Forward-Data/m-p/126531#M97730 Kendo213 2014-01-27T15:24:20Z https://community.splunk.com/t5/Getting-Data-In/Forward-Data/m-p/126532#M97731 <P>You can route specific events to other Splunk instances, and/or index them locally on the Splunk instances you're routing the events from. See more here: <A href="http://docs.splunk.com/Documentation/Splunk/6.0/Forwarding/Routeandfilterdatad">http://docs.splunk.com/Documentation/Splunk/6.0/Forwarding/Routeandfilterdatad</A></P> Mon, 27 Jan 2014 15:30:54 GMT https://community.splunk.com/t5/Getting-Data-In/Forward-Data/m-p/126532#M97731 Ayn 2014-01-27T15:30:54Z