Getting Data In

_TCPRouting and _Syslog Routing to 3rd Party using a Heavy Forwarder

lukessi
Path Finder

Hello,

I need to send source types to my indexes as per normal. But I also got to send those same source types to a 3rd party in Syslog format.

I can't seem to get the transforms to send to TCP and to Syslog. Has anyone got any experience with doing this?

I can do both as TCP which works fine, but if I mix and match it has issues.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

test 2

test 222222

test

test

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...