CODEWITHSUNDEEP
databaseelasticsearchtransfersplunk
Nikhil Tikoo
Nikhil Tikoo

Reputation: 375

Move data from Splunk to Elastic Search

I have a script in splunk which runs in regular intervals and puts data in the Splunk. Now i want to transfer this data to Elastic Search also. So the data gets input in both splunk and Elastic Search. Any ideas on how to do it?

Upvotes: 1

Views: 2028

Answers (2)

Jon Webster
Jon Webster

Reputation: 171

There are a few ways to let Splunk do this for you. The most applicable could be the export command, which can export Splunk data in JSON format, which is what Elasticsearch requires. Export can be run via CLI, REST, the Splunk SDKs, or manually via the Web UI. doc link

Upvotes: 2

outrunengineer
outrunengineer

Reputation: 126

Using Spring Data Elasticsearch in Java, and Spring Batch with Quartz Scheduler, you could set up a batch job that reads in data from the Splunk REST API, and writes the data into an Elasticsearch index.

Upvotes: 1

Related Questions