Export logs by splunk to logstash servers


(Bill) #1

We have a manage services running by another company which they only export application logs from splunk ( I don't know detail, and guess that's splunk forwarder). We don't allow to install any software on these manage service instance.

But in our business, we have logstash servers only. So can you give me some hints on how to received these logs in our logstash servers?

I search the input plugin (https://www.elastic.co/guide/en/logstash/current/input-plugins.html), splunk is not in the list.


(Mark Walkom) #2

Can it send the data to a TCP stream or a file? If so, LS can accept it.


(Bill) #3

Thanks, @warkolm.

Could you please provide detail on how to send data to a TCP stream or a file?

Any documents I can read?


(Mark Walkom) #4

You'd need to consult the Splunk docs for that.


(Bill) #5

sure. I will keep to dig it.


(system) #6