Is that possible to push data from on prem to AWS S3 using Splunk Forwarder ? Any other alternative options ?

[ranjithmj]

Is that possible to push data from on prem to AWS S3 using Splunk Forwarder ? Any other alternative options ?

[Gr0und_Z3r0]

Use AWS Direct Connect to send data from on prem infra to AWS. It is the most reliable,secure and efficient way of doing it.  From there feed the data to Splunk as deemed fit.

[isoutamo]

Hi

Basically yes, but if you want to use splunk for that you are also needing indexer cluster on AWS side and then use Ingest actions. Is this the best way to do it? Definitely not unless you already have indexer cluster on AWS side.

There are other tools to do this better, but which one is correct/best solutions depends on why and what you really need to do.

r. Ismo