Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- Enabling SFTP for forwarding logs
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
keerthana_k
Communicator
11-12-2013
04:59 AM
Hi
We have splunk forwarders installed in our web servers which forward logs to our analytics application's forwarder. We need this transfer to happen through SFTP. Is there any way we can configure the forwarders to use SFTP for transferring the log files? Where are we supposed to make changes?
Thanks in advance.
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Ayn
Legend
11-12-2013
05:17 AM
Nope, forwarders cannot transfer data using SFTP. The supported ways of forwarding are:
- Forwarding to another Splunk instance using Splunk's own protocol
- Send raw data unencrypted via UDP
- Send raw data unencrypted via TCP
- Send raw data encrypted via TCP using SSL
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Ayn
Legend
11-12-2013
05:17 AM
Nope, forwarders cannot transfer data using SFTP. The supported ways of forwarding are:
- Forwarding to another Splunk instance using Splunk's own protocol
- Send raw data unencrypted via UDP
- Send raw data unencrypted via TCP
- Send raw data encrypted via TCP using SSL
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
keerthana_k
Communicator
05-04-2018
05:00 AM
Is this scenario changed with newer versions of Splunk? I couldn't find any documentation related to it but would like to know if it is possible.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
FrankVl
Ultra Champion
05-04-2018
05:20 AM
That answer is still valid.
Well, it can also send as syslog instead of raw, but that still doesn't get you SFTP.
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!
Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform
Are you ready to revolutionize your IT operations? As digital transformation accelerates, the demand for ...
Calling All Security Pros: Ready to Race Through Boston?
Hey Splunkers,
.conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...
Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...
Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...
