Splunk Forwarding
Last updated
Was this helpful?
Last updated
Was this helpful?
Apica's plugins include creating one or more Splunk Output configurations that can be then used to send data to Splunk. We support all the enterprise modes for forwarding, including sending data to a Standalone Server, a list of indexers, and sending data to indexers using Peer discovery.
Follow the below steps to create an S2S forwarder to an splunk indexer:
Create a Splunk Forwarding Proxy
Source Extension
.
Create a forwarder
to use the Splunk Forwarding Proxy source extension
created in step 1 above:
One or more forwarders can be created to use the same Splunk Forwarding Proxy Source Extension
Forwarders can be of type _json
or _metric
_metric
type can forward to a splunk metric index.
_json
can forward to a splunk standard index.
The Splunk plugin for output configurations can be launched from the Source Extensions
section under Integrations
.
Selecting the Forwarding Proxy
source extension gives you the configured proxies as well as the ability to create a new one.
You can expand on the proxy to see its settings. The hec_token
can be used to setup the forwarder
.