Can I send uncooked data from one HF to another?

[tiaatim]

Hi, I have a scenario where I need to forward data from a HF to another HF but I need it to be uncooked so the receiving HF can also forward to a 3rd party. Is this possible?

Thanks!

[tiaatim]

I tested this and couldn't get it to work so going a different route.

[tiaatim]

Thanks, I've seen that but it doesn't specifically state that you can go from HF to HF uncooked.

[jpalacian]

Hi!

Have a look here:
https://docs.splunk.com/Documentation/Splunk/8.0.2/Forwarding/Forwarddatatothird-partysystemsd