All,
Has anyone ever setup Filebeat to send data to Splunk's HEC? If so mind sharing your config?
Thanks
-Daniel
Hi @daniel333
You can use logstash to forward data from Filebeat to Splunk via http-event-collector:
Reference: https://medium.com/ibm-garage/how-to-forward-events-from-logstash-to-splunk-4f2608041feb