Filebeat to Splunk Http Event Collector?

[daniel333]

All,

Has anyone ever setup Filebeat to send data to Splunk's HEC? If so mind sharing your config?

Thanks
-Daniel

[dhihoriya_splun]

Hi @daniel333

You can use logstash to forward data from Filebeat to Splunk via http-event-collector:
Reference: https://medium.com/ibm-garage/how-to-forward-events-from-logstash-to-splunk-4f2608041feb