Hello,
Can I use the Java SDK to connect to a Splunk Forwarder and send data through TCP input ? Do I need an heavy forwarder or a an universal forwarder? Will the forwarder buffer events in memory in case of network failure with the indexer? (I hope so)
Thanks!
Yes. You can find out more details as well as other tools (Eclipse plug-ins, examples, etc) starting here:
http://dev.splunk.com/view/java-sdk/SP-CAAAECN
And more directly here:
http://dev.splunk.com/view/java-sdk/SP-CAAAEJ2