Splunk Enterprise

How to route data from splunk heavy forwarder to on premise splunk server

Balaji
Engager

I have installed splunk universal forwarder on ec2 instances which forward data to splunk heavy forwarder. In order to route the date to Splunk on premise, I need to configure splunk heavy forwarder. I have configured heavy forwarder to route date to splunk cloud. How to configure the same to forward the data to on-premise. 

Labels (1)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

just add another target group ( like you have for Splunk cloud) for onprem in your outputs.conf. 

View solution in original post

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

just add another target group ( like you have for Splunk cloud) for onprem in your outputs.conf. 

0 Karma

Balaji
Engager

Thanks, that worked. 

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...