Hello,
We would like to be able to have our universal forwarders that are installed on AWS instances, to forward logs/indexes to an S3 bucket(instead of an indexer). Our client will then use their own splunk to read them. Is this possible?
We want to avoid just sending all our logs for this client to S3, as we have a lot of different logs, and maintaining an in house script to this would be high. So using splunk is our first choice, but I have been unable to find this feature specifically.
↧