Deployment Architecture

sendCookedData to a third-party system.

shangshin
Builder

Hi, When sendCookedData is set to be false, we can send data to a third-party system. The question is when sendCookedData is set to be "True", can we still send data to a third-party system?

Tags (1)
0 Karma
1 Solution

Ayn
Legend

No, you cannot. Cooked data is in Splunk's proprietary format and is only intended for Splunk-to-Splunk communication.

View solution in original post

Ayn
Legend

No, you cannot. Cooked data is in Splunk's proprietary format and is only intended for Splunk-to-Splunk communication.

Get Updates on the Splunk Community!

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 3)

Welcome back to Splunk Classroom Chronicles, our ongoing blog series that pulls back the curtain on Splunk ...

Operationalizing TDIR: Building a More Resilient, Scalable SOC

Optimizing SOC workflows with a unified, risk-based approach to Threat Detection, Investigation, and Response ...

Almost Too Eventful Assurance: Part 1

Modern IT and Network teams still struggle with too many alerts and isolating issues before they are notified. ...