Archive

Forward specific data from Splunk enterprise to Splunk Cloud

Motivator

Hi,

We have both Splunk enterprise and Splunk cloud. I would like to take a specific set of data from Splunk enterprise (output from a query/report) and forward that to Splunk cloud on a scheduled basis. I know Splunk can email results and if that is the only way then we will jump thru the hoops to make that happen but I was hoping there is another way.

Tags (1)
0 Karma

SplunkTrust
SplunkTrust

Hi @dbcase,

What about forwarding data from the source itself using

http://docs.splunk.com/Documentation/Splunk/7.1.1/Forwarding/Routeandfilterdatad#Replicate_a_subset_...

0 Karma