How to use Splunk forwarder host to route the monitor data to specific tcpout?

[bhupalbobbadi]

Hi Team,

I've multiple monitors on multiple forwarders and multiple tcpouts, I need to use forwarder hostname to route the monitor to respective tcpout, is there a configuration which can provide this forwarder host based routing ?

Thanks in advacne.

[PickleRick · Accepted solution]

If you're talking about UF, there is no advanced parsing and routing functionality. You need HF for this.