Knowledge Management

Can we send summary indexed data to third party receivers?

Motivator

Can we send summary indexed data to third party receivers?

Like I have done the summary indexing on my search head and now I want to forward that data to some third party system.

0 Karma

Super Champion

Hi Vishal,
I have not done this task.. but yes, i think this should be possible..

maybe you can refer these two pages -
http://docs.splunk.com/Documentation/Splunk/7.1.0/Knowledge/Usesummaryindexing
https://docs.splunk.com/Documentation/Splunk/7.1.0/Forwarding/Forwarddatatothird-partysystemsd

0 Karma

Motivator

Hello @inventsekar,

Sending data from one forwarder to third party is there.
But my issue is the data which is already indexed using summary indexing, now I have to forward that data to some other third party server.

0 Karma