Splunk Enterprise

How to route data from splunk heavy forwarder to on premise splunk server

Balaji
Engager

I have installed splunk universal forwarder on ec2 instances which forward data to splunk heavy forwarder. In order to route the date to Splunk on premise, I need to configure splunk heavy forwarder. I have configured heavy forwarder to route date to splunk cloud. How to configure the same to forward the data to on-premise. 

Labels (1)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

just add another target group ( like you have for Splunk cloud) for onprem in your outputs.conf. 

View solution in original post

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

just add another target group ( like you have for Splunk cloud) for onprem in your outputs.conf. 

0 Karma

Balaji
Engager

Thanks, that worked. 

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...