Can an intermediate Heavy Forwarder forward data to a third party system without indexing?

[disgruntled2704]

Can I forward data from the universal forwarders using an intermediate heavy weight forwarder to a third-party system without indexing?

If so, how exactly would I achieve this?

Thanks 🙂

[john_petrucci_1]

Also, if only specific data coming from the universal forwarder needs to be routed, how to do that?

[ChrisG]

There are docs about Forwarding data to third-party systems in the Splunk Enterprise Forwarding Data manual, have you looked at those already?