Is there a way to send data to Splunk over SSL from a third-party device without using a forwarder?

[willial]

I'm trying to get Splunk to accept communication from a third-party device over SSL. The documentation is oriented toward Splunk Forwarder to Receiver cases. Is there a way to directly transmit to Splunk over SSL without using a Forwarder?

[Ayn · Accepted solution]

Yes, Splunk supports receiving syslog over SSL. Use the tcp-ssl input type in inputs.conf. More info available in the inputs.conf specs: http://docs.splunk.com/Documentation/Splunk/6.1.3/Admin/Inputsconf

[willial]

Thanks, I'll check it out!