Getting Data In

Can I forward some logs from Splunk Light Free to a third party syslog server?

DotTest37
Path Finder

Can Splunk Light Free forward some logs to a third party server?

Ex. I have Splunk Light free monitoring some log files on on a remote server and I'd like to filter some of those logs in real-time and send them to another syslog-capable server (Solarwinds in this case). Why? Because I have Alerting Capabilities on Solarwinds and I don't have that on Splunk Light Free (Besides, I have all Alerts already implemented on Solarwinds and I prefer to centralize the alerting functionality there, for management purposes).

0 Karma

jterry
Splunk Employee
Splunk Employee

splunk supports queries from the CLI. How about: "[splunk_home]/bin/splunk search [my filter] | my_forwarding_script.sh" ?

0 Karma

jterry
Splunk Employee
Splunk Employee

splunk supports queries from the CLI. How about: "[splunk_home]/bin/splunk search [my filter] | my_forwarding_script.sh" ?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...