Can we send summary indexed data to third party receivers?
Like I have done the summary indexing on my search head and now I want to forward that data to some third party system.
Hi Vishal, I have not done this task.. but yes, i think this should be possible..
maybe you can refer these two pages - http://docs.splunk.com/Documentation/Splunk/7.1.0/Knowledge/Usesummaryindexing https://docs.splunk.com/Documentation/Splunk/7.1.0/Forwarding/Forwarddatatothird-partysystemsd
Hello @inventsekar,
Sending data from one forwarder to third party is there. But my issue is the data which is already indexed using summary indexing, now I have to forward that data to some other third party server.
