Getting Data In

Forward data to third-party systems

saifuddin9122
Path Finder

Hello

i am trying to forward all the indexed data to a non-splunk system. my questions is does we need to use any specific software or we can forward to a linux machine??

if it is linux machine, i hope i should make a change to outputs.conf . please correct me if am doing it in a wrong way

thanks

0 Karma
1 Solution

gfreitas
Builder

You can forward your data to any other third-party software, for example a syslog server. For more information on how to accomplish that, you can use this link: http://docs.splunk.com/Documentation/Splunk/6.4.1/Forwarding/Forwarddatatothird-partysystemsd

View solution in original post

0 Karma

gfreitas
Builder

You can forward your data to any other third-party software, for example a syslog server. For more information on how to accomplish that, you can use this link: http://docs.splunk.com/Documentation/Splunk/6.4.1/Forwarding/Forwarddatatothird-partysystemsd

0 Karma

saifuddin9122
Path Finder

Thanks for your reply

one last question is it mandatory to use software for receiving?? can't we forward to a simple linux machine which listens on a specific port???

0 Karma

gfreitas
Builder

You can, but you will need something to translate this data being received. Anyway, since your linux machine is listening to the port you will receive data.

0 Karma

saifuddin9122
Path Finder

Thank you

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Calling all Splunk architects, platform admins, and app developers: the site is open, and the blueprints are ...

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...