Can I use a Splunk forwarder to forward logs to another server that is not an indexer?

[kranthi851]

Hi

Can I use Splunk forwarder to forward logs to other server, not the indexer?

[Raghav2384]

Hello @kranthi851,

Short answer is yes!

Please see these splunk docs for a working example: http://docs.splunk.com/Documentation/Splunk/6.4.2/Forwarding/Forwarddatatothird-partysystemsd

That said, you'd miss all the amazing things splunk can do to the forwarded data 😉

Hope this helps!

Thanks,
Raghav