Forward specific data from Splunk enterprise to Splunk Cloud

[dbcase]

Hi,

We have both Splunk enterprise and Splunk cloud. I would like to take a specific set of data from Splunk enterprise (output from a query/report) and forward that to Splunk cloud on a scheduled basis. I know Splunk can email results and if that is the only way then we will jump thru the hoops to make that happen but I was hoping there is another way.

[renjith_nair]

Hi @dbcase,

What about forwarding data from the source itself using

http://docs.splunk.com/Documentation/Splunk/7.1.1/Forwarding/Routeandfilterdatad#Replicate_a_subset_...