Can I send uncooked data from one HF to another?

tiaatim · ‎03-04-2020

Hi, I have a scenario where I need to forward data from a HF to another HF but I need it to be uncooked so the receiving HF can also forward to a 3rd party. Is this possible?

Thanks!

tiaatim · ‎03-05-2020

I tested this and couldn't get it to work so going a different route.

tiaatim · ‎03-04-2020

Thanks, I've seen that but it doesn't specifically state that you can go from HF to HF uncooked.

jpalacian · ‎03-04-2020

Hi!

Have a look here:
https://docs.splunk.com/Documentation/Splunk/8.0.2/Forwarding/Forwarddatatothird-partysystemsd

Can I send uncooked data from one HF to another?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future

Join the Conversation

Can I send uncooked data from one HF to another?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future