Getting Data In
Highlighted

Can we write UDP or TCP streams directly to indexer ports rather than using a Universal Forwarder in between?

Contributor

Can we write UDP or TCP streams directly to indexer ports rather than using a Universal Forwarder in between?

0 Karma
Highlighted

Re: Can we write UDP or TCP streams directly to indexer ports rather than using a Universal Forwarder in between?

SplunkTrust
SplunkTrust

Yes, look at the tcp and udp stanzas in inputs.conf.

View solution in original post

0 Karma