Getting Data In

Can I use the same Splunk Cloud heavy forwarder to send data to on-premises Splunk?

ppanchal
Path Finder

I have a heavy forwarder currently sending data to Splunk Cloud.

Can I use the same heavy forwarder to stop data sending to Splunk Cloud and start sending data to on-premises Splunk?

If yes, then how?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Change the forwarder's outputs.conf file to point to your on-prem indexers. You'll also need to change the security settings to values appropriate for your on-prem environment.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Exporting Splunk Apps

Join us on Monday, October 21 at 11 am PT | 2 pm ET!With the app export functionality, app developers and ...

Cisco Use Cases, ITSI Best Practices, and More New Articles from Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...