I'm running the Add-on for Linux with Enterprise and would like to send the Add-on data to a separate server from the Enterprise data. How is this done?
You can forward data from splunk to other systems. Follow the steps in the docs:
If the destination is a 3rd party system:
If the destination is another splunk instance: