Splunk Search

Is it possible to consume data from Splunk by another system?

rakeshyv0807
Explorer

Hello,

Currently we are doing a POC where we are forwarding data to Splunk cloud via HTTP Event collector. We are also using Splunk cloud where the data from several systems is being forwarded to splunk cloud via Heavy & Universal Forwarders. We came across a requirement where we need to push the data that is collected in splunk to a third party system by any means. We want to first try with the POC we are doing and later implement the same in our actual environment. Can you please suggest if something like this possible and if so how to achieve it?

Any help is greatly appreciated and thanks in advance.

Rakesh

Tags (1)
0 Karma

adonio
Ultra Champion

read here all the way through the article:
http://docs.splunk.com/Documentation/Splunk/7.2.1/Forwarding/Forwarddatatothird-partysystemsd

note: not sure what are the capabilities of moving data from Splunk Cloud, therefore ill reccomend to first try focus your POC on instances under your control such as Heavy Forwarders

hope it helps

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...