> For the complete documentation index, see [llms.txt](https://docs.apica.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.apica.io/~/revisions/g9hjYlouXJ3yS4AuZAE8/flow/list-of-forwarders.md).

# List of Forwarders

Currently, **Apica** supports the following targets:

| Target                                                                                                                                                                                                              | Type               | Description                                                             |
| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------ | ----------------------------------------------------------------------- |
| [ArcSight Logger](/~/revisions/g9hjYlouXJ3yS4AuZAE8/flow/list-of-forwarders/arc-sight.md)                                                                                                                           | Syslog, TCP, CEF   | Forward syslog frames over TCP                                          |
| [ArcSight Logger](/~/revisions/g9hjYlouXJ3yS4AuZAE8/flow/list-of-forwarders/arc-sight.md)                                                                                                                           | Syslog, TCP        | Forward ArcSight CEF frames over TCP                                    |
| [Datadog](/~/revisions/g9hjYlouXJ3yS4AuZAE8/flow/forwarding-to-monitoring-tools/datadog-forwarding.md)                                                                                                              | JSON               | Batched JSON forward to Datadog                                         |
| [Dynatrace HTTP Event Collector](/~/revisions/g9hjYlouXJ3yS4AuZAE8/flow/forwarding-to-monitoring-tools/dynatrace-forwarding.md)                                                                                     | JSON               | Batched JSON forward to Dynatrace                                       |
| [Elastic Compatible](/~/revisions/g9hjYlouXJ3yS4AuZAE8/flow/forwarding-to-monitoring-tools/elasticsearch-forwarding.md)                                                                                             | JSON               | Send data to an Elastic index                                           |
| RSA NetWitness Syslog                                                                                                                                                                                               | TCP                | Syslog forwarder for RSA Netwitness                                     |
| RSA NetWitness Syslog (CEF)                                                                                                                                                                                         | TCP, CEF           | Syslog CEF forwarder for RSA Netwitness                                 |
| [NewRelic HTTP Event Collector](/~/revisions/g9hjYlouXJ3yS4AuZAE8/flow/forwarding-to-monitoring-tools/new-relic-forwarding.md)                                                                                      | JSON               | Batched JSON forward to NewRelic                                        |
| [Splunk HTTP Event Collector](https://app.gitbook.com/o/-LmzGjHypGkPBzYc0fF0/s/-LmzGprckLqwd5v6bs6m/~/changes/1691/flow/forwarding-to-monitoring-tools/splunk-forwarding/splunk-http-event-collector-hec-forwarder) | JSON               | Batched JSON forward to Splunk                                          |
| [Splunk Universal / Heavy Forwarder](https://app.gitbook.com/o/-LmzGjHypGkPBzYc0fF0/s/-LmzGprckLqwd5v6bs6m/~/changes/1691/flow/forwarding-to-monitoring-tools/splunk-forwarding)                                    | Syslog, TCP        | Syslog forwarder for Splunk                                             |
| [Splunk Universal CEF Forwarder](https://app.gitbook.com/o/-LmzGjHypGkPBzYc0fF0/s/-LmzGprckLqwd5v6bs6m/~/changes/1691/flow/forwarding-to-monitoring-tools/splunk-forwarding)                                        | Syslog, TCP, CEF   | Syslog CEF forwarder for Splunk                                         |
| [Splunk Universal Forwarder / Heavy Forwarder](https://app.gitbook.com/o/-LmzGjHypGkPBzYc0fF0/s/-LmzGprckLqwd5v6bs6m/~/changes/1691/flow/forwarding-to-monitoring-tools/splunk-forwarding)                          | S2S                | Forward data to Apica in Cooked mode                                    |
| [Object Store](/~/revisions/g9hjYlouXJ3yS4AuZAE8/flow/object-store-forwarding/s3-compatible.md)                                                                                                                     | S3 Compatible      | AWS S3, CEPH, Minio, GCP Cloud Storage, OCI Buckets                     |
| [Object Store](/~/revisions/g9hjYlouXJ3yS4AuZAE8/flow/object-store-forwarding.md)                                                                                                                                   | Azure Blob Storage | Native support for Azure blob storage API's                             |
| [OpenTelemetry](broken://pages/Ib0iuIbZWbIFzcJyAnQd)                                                                                                                                                                | OpenTelemetry      | Forward Logs, Metrics, Traces to OpenTelemetry compatible destinations. |

#### Configuring a Forwarder <a href="#configuring-a-forwarder" id="configuring-a-forwarder"></a>

To configure a Forwarder, navigate to the Forwarder page first and select your preferred forwarder.

Below, an example of configuring a Splunk HTTP Event Collector is shown

1. **Creating an HTTP Event Collector Data Input key from Splunk**
   * Navigate to your Splunk Environment
   * Locate the Settings menu
   * Locate the Data Inputs sub-menu
   * Click on the New Token option, which is located on the top banner
   * Enter a Token name, and skip to the last pag,e and click Done
   * Use the generated **HTTP Event Collector** key in Apica
2. **Creating a Splunk HTTP Event Collector on Apica**
   * Navigate to the Create Forwarders page
   * Click on Forwarders
   * Click on the Splunk HTTP Event Collector

<figure><img src="/files/Z0j0h14u8TkHHDZLoqme" alt=""><figcaption><p>Create an Splunk Forwarder</p></figcaption></figure>

* Fill out all the below fields and click Create
  * **buffer\_size**: The Buffer size for logs
  * **host**: Splunk Endpoint
  * **password**: Data Input Key created in step 1
  * **port**: Splunk server receiving port (default 8088)
  * **type:** log format (*default* \_*json, or set to \_metric to send to a metric index*)
  * **user:** UI username of Splunk Endpoint
  * **name**: Name of the forwarder

That's it. You've successfully created the Splunk HTTP Event Collector forwarder. Now navigate to the Explore page and start doing Mapping or Replay operation.