Hi,
I have an all in one splunk enterprise environment with only Universal Forwarders.
My requirement is to send all logs in raw format to a third party syslog server.
I know i cannot configure syslog forwarding from UF and its only possible through HF.
Is there anyway i can forward raw syslog directly from the Splunk Enterprise instance.
thanks in Advance.