# Export logs by splunk to logstash servers

**URL:** <https://discuss.elastic.co/t/export-logs-by-splunk-to-logstash-servers/39714>\
**Category:** Logstash\
**Created:** [January 20, 2016, 11:28pm UTC](https://discuss.elastic.co/t/export-logs-by-splunk-to-logstash-servers/39714 "2016-01-20T23:28:51Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![bw57899](https://avatars.discourse-cdn.com/v4/letter/b/b782af/32.png) [@bw57899](https://discuss.elastic.co/u/bw57899)\
**Post date:** [January 20, 2016, 11:28pm UTC](https://discuss.elastic.co/t/export-logs-by-splunk-to-logstash-servers/39714/1 "2016-01-20T23:28:51Z")

</div>

We have a manage services running by another company which they only export application logs from splunk ( I don't know detail, and guess that's splunk forwarder). We don't allow to install any software on these manage service instance.

But in our business, we have logstash servers only. So can you give me some hints on how to received these logs in our logstash servers?

I search the input plugin ([https://www.elastic.co/guide/en/logstash/current/input-plugins.html](https://www.elastic.co/guide/en/logstash/current/input-plugins.html)), splunk is not in the list.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 21, 2016, 1:56am UTC](https://discuss.elastic.co/t/export-logs-by-splunk-to-logstash-servers/39714/2 "2016-01-21T01:56:13Z")

</div>

Can it send the data to a TCP stream or a file? If so, LS can accept it.

---

<div class="post-metadata">

**Author:** ![bw57899](https://avatars.discourse-cdn.com/v4/letter/b/b782af/32.png) [@bw57899](https://discuss.elastic.co/u/bw57899)\
**Post date:** [January 22, 2016, 11:04pm UTC](https://discuss.elastic.co/t/export-logs-by-splunk-to-logstash-servers/39714/3 "2016-01-22T23:04:01Z")

</div>

Thanks, @warkolm.

Could you please provide detail on how to send data to a TCP stream or a file?

Any documents I can read?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 24, 2016, 3:36am UTC](https://discuss.elastic.co/t/export-logs-by-splunk-to-logstash-servers/39714/4 "2016-01-24T03:36:44Z")

</div>

You'd need to consult the Splunk docs for that.

---

<div class="post-metadata">

**Author:** ![bw57899](https://avatars.discourse-cdn.com/v4/letter/b/b782af/32.png) [@bw57899](https://discuss.elastic.co/u/bw57899)\
**Post date:** [January 25, 2016, 12:03am UTC](https://discuss.elastic.co/t/export-logs-by-splunk-to-logstash-servers/39714/5 "2016-01-25T00:03:48Z")

</div>

sure. I will keep to dig it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:14am UTC](https://discuss.elastic.co/t/export-logs-by-splunk-to-logstash-servers/39714/6 "2017-07-06T05:14:34Z")

</div>