Getting Data In

Forwarding attachment files in Splunk

samiomer
Path Finder

Hello,

Is it possible to forward file attachments between Splunks?

1 Solution

jbsplunk
Splunk Employee
Splunk Employee

I am almost certain that this is not possible, but I'd need to understand your specific use case to be sure.

View solution in original post

0 Karma

samiomer
Path Finder

For example, if there's an event that references a file on a forwarding-slunk machine, would I be able to make it forward a file attachment along with the event?

Thanks

0 Karma

Ayn
Legend

No, there is no such functionality in Splunk. What you could do is trigger a script that does something with the file (like copying it to a fileshare somewhere) but that process would be separate from Splunk.

jbsplunk
Splunk Employee
Splunk Employee

I am almost certain that this is not possible, but I'd need to understand your specific use case to be sure.

0 Karma

Ayn
Legend

Please clarify what you mean. What kind of file attachments?

0 Karma
Get Updates on the Splunk Community!

ATTENTION!! We’re MOVING (not really)

Hey, all! In an effort to keep this Slack workspace secure and also to make our new members' experience easy, ...

Splunk Admins: Build a Smarter Stack with These Must-See .conf25 Sessions

  Whether you're running a complex Splunk deployment or just getting your bearings as a new admin, .conf25 ...

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...