We have a business need that requires a filtered set of data from one indexer be shipped offsite to another indexer.
Is that possible and if so how?
you can use index and forward , see details in http://docs.splunk.com/Documentation/Splunk/6.1.4/Forwarding/Routeandfilterdatad