Hi,
is it possible to use the SFTP protocol?
Regards
The FTP Receiver app doesn't support SFTP since that is entirely different protocol than FTP.
However, it can be made to support FTPS (FTP over SSL). If you want this, I could probably enable support for this in the app. Let me know if you want this.
If you mean to pull in data to the Indexers, then: No. You can however setup a Heavy Forwarder and build a script (make it atomic
by pulling in files with a blacklisted suffix like *.tmp
and then rename them once they are transferred) to use sftp to put the files where splunk is waiting for them. In such a case I use batch
with sinkhole
instead of monitor
so that they get deleted as each is forwarded.