Getting Data In

Can I forward logs from a Heavy Forwarder in JSON format to another data capture device?

robnewman666
Path Finder

I wanted to ask if it was easy or possible to forward logs if some may be in text format from a HF to another device and send in JSON format?

Labels (2)
Tags (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Splunk supports forwarding data in raw form or in syslog form, but not JSON.  See https://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Forwarddatatothird-partysystemsd

Go to https://ideas.splunk.com to suggest they support JSON.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Splunk supports forwarding data in raw form or in syslog form, but not JSON.  See https://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Forwarddatatothird-partysystemsd

Go to https://ideas.splunk.com to suggest they support JSON.

---
If this reply helps you, an upvote would be appreciated.

robnewman666
Path Finder

Thanks very much. 🙂

0 Karma