Thanks for your input.
Apparently this isn't the case with my setup. The db_connect_clientip_lookup is the only external lookup that exists in the system.
... View more
Sure you can.
http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Forwarddatatothird-partysystemsd#TCP_data
You'd have to write your own TCP server to receive the data and push to Kafka. Pretty simple code.
... View more