I have a requirement to forward Okta logs to S3 buckets, in addition to ingesting into Splunk.
So I see there might two ways we could forward logs to S3 buckets,
remote_queue.sqs.large_message_store.endpoint = <URL>
* Currently not supported. This setting is related to a feature that is
still under development.Or after indexing logs into SplunkHowever, I am unsure, whether for both options, there is a clearly documented reliable process to achieve the outcome.Can please advise on this ?