Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Splunk HEC events to arcsight

$
0
0
Is it possible to send Splunk HEC events message part to 3rd party collector/arcsight? Eg... Now it is : Logstash --- SplunkHEC/ HF --- Indexer I want to parse message field in the HEC and send to arcsight collector before being send to indexers. Is it possible? Kindly help.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>