All Apps and Add-ons

Can bluecoat SG proxy send log files to two separate instances of splunk

New Member

Fill in the details...

0 Karma

Splunk Employee
Splunk Employee

The Blue Coat device should allow you to specify multiple targets for the syslog host (endpoint). I believe this can be done via CLI or the UI.

In a worst case scenario, you could have a splunk instance perform data cloning or index and forward although I would not recommend you do this without consulting with a knowledgable Splunker.

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!