Can I send uncooked data from one HF to another?

tiaatim · ‎03-04-2020

Hi, I have a scenario where I need to forward data from a HF to another HF but I need it to be uncooked so the receiving HF can also forward to a 3rd party. Is this possible?

Thanks!

tiaatim · ‎03-05-2020

I tested this and couldn't get it to work so going a different route.

tiaatim · ‎03-04-2020

Thanks, I've seen that but it doesn't specifically state that you can go from HF to HF uncooked.

jpalacian · ‎03-04-2020

Hi!

Have a look here:
https://docs.splunk.com/Documentation/Splunk/8.0.2/Forwarding/Forwarddatatothird-partysystemsd

Can I send uncooked data from one HF to another?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

A Four-Part Event Series: Full Stack Observability For the AI Era

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

Join the Conversation

Can I send uncooked data from one HF to another?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

A Four-Part Event Series: Full Stack Observability For the AI Era

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security