Getting Data In

Is it possible to forward filtered data from one indexer to another? If yes, how?

jessew
New Member

We have a business need that requires a filtered set of data from one indexer be shipped offsite to another indexer.
Is that possible and if so how?

0 Karma

kml_uvce
Builder

you can use index and forward , see details in http://docs.splunk.com/Documentation/Splunk/6.1.4/Forwarding/Routeandfilterdatad

kamal singh bisht
0 Karma
Get Updates on the Splunk Community!

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...