Getting Data In
Highlighted

Filebeat to Splunk Http Event Collector?

Builder

All,

Has anyone ever setup Filebeat to send data to Splunk's HEC? If so mind sharing your config?

Thanks
-Daniel

0 Karma
Highlighted

Re: Filebeat to Splunk Http Event Collector?

Splunk Employee
Splunk Employee

Hi @daniel333

You can use logstash to forward data from Filebeat to Splunk via http-event-collector:
Reference: https://medium.com/ibm-garage/how-to-forward-events-from-logstash-to-splunk-4f2608041feb

0 Karma