Getting Data In

Can an intermediate Heavy Forwarder forward data to a third party system without indexing?

disgruntled2704
Engager

Can I forward data from the universal forwarders using an intermediate heavy weight forwarder to a third-party system without indexing?

If so, how exactly would I achieve this?

Thanks 🙂

john_petrucci_1
Engager

Also, if only specific data coming from the universal forwarder needs to be routed, how to do that?

0 Karma

ChrisG
Splunk Employee
Splunk Employee

There are docs about Forwarding data to third-party systems in the Splunk Enterprise Forwarding Data manual, have you looked at those already?

0 Karma
Get Updates on the Splunk Community!

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...

From GPU to Application: Monitoring Cisco AI Infrastructure with Splunk Observability ...

AI workloads are different. They demand specialized infrastructure—powerful GPUs, enterprise-grade networking, ...

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...