Solved: splunk Universal forwarder

iherb_0718 · ‎04-13-2021

Is the data that is sent from a splunk Universal Forwarder to the heavy forwarder, syslog messages? If so, how do I find out which format it is using (ie: syslog-ng)

scelikok · ‎04-13-2021

Hi @iherb_0718,

Splunk instances data communication is called S2S (Splunk to Splunk) are proprietary TCP communications. They are not syslog.

If this reply helps you an upvote and "Accept as Solution" is appreciated.

View solution in original post

scelikok · ‎04-13-2021

Hi @iherb_0718,

Splunk instances data communication is called S2S (Splunk to Splunk) are proprietary TCP communications. They are not syslog.

If this reply helps you an upvote and "Accept as Solution" is appreciated.

splunk Universal forwarder

configuration

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

Splunk Answers Content Calendar, July Edition I

Are you a member of the Splunk Community?

splunk Universal forwarder

configuration

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

Splunk Answers Content Calendar, July Edition I