Can Splunk Light Free forward some logs to a third party server?
Ex. I have Splunk Light free monitoring some log files on on a remote server and I'd like to filter some of those logs in real-time and send them to another syslog-capable server (Solarwinds in this case). Why? Because I have Alerting Capabilities on Solarwinds and I don't have that on Splunk Light Free (Besides, I have all Alerts already implemented on Solarwinds and I prefer to centralize the alerting functionality there, for management purposes).
splunk supports queries from the CLI. How about: "[splunk_home]/bin/splunk search [my filter] | my_forwarding_script.sh" ?
splunk supports queries from the CLI. How about: "[splunk_home]/bin/splunk search [my filter] | my_forwarding_script.sh" ?