How can I transfer data from splunk to syslog?
I did not understand the explanation in the link:
http://docs.splunk.com/Documentation/Splunk/6.0/Forwarding/Forwarddatatothird-partysystemsd#Syslog_d...
I would love a more detailed explanation.
I have the splunk on one computer and KIWI on another computer. I want to transfer the data from splunk to kiwi syslog.
I would say this part of the documentation describes it quite well:
http://docs.splunk.com/Documentation/Splunk/6.0/Forwarding/Forwarddatatothird-partysystemsd#Send_a_s...
Can you perhaps be more specific on what parts of it you struggle with, or what issues you run into when trying it out?
Note: this approach applies to data that is freshly coming in to Splunk through some kind of input mechanism. It does not apply to data that is already stored inside splunk.