OpenSearch to Splunk export/searching capabilities

[mmguero]

@mmguero cloned issue idaholab/Malcolm#5 on 2020-09-09:

From Malcolm created by mmguero: #10

Research ES to Splunk export/searching capabilities

Possibilities:

• Forwarding from ES via Logstash syslog

  • https://www.elastic.co/guide/en/logstash/current/plugins-inputs-elasticsearch.html

  • https://www.elastic.co/guide/en/logstash/current/plugins-outputs-syslog.html

• Searching ES databases with Splunk

  • https://github.com/brunotm/elasticsplunk

  • https://splunkbase.splunk.com/app/4175/#/details

  • https://github.com/hvandenb/splunk-elasticsearch

[mmguero]

@nilssachs commented on 2023-03-13:

Would be a great addition. Currently struggling with the Syslog-output.