Highlighted
rochfo Super Contributor.
Super Contributor.
773 views

Forward copy of data

Is it possible to forward a copy of data from Sentinel to another system? I'd like to set up a forwarder to another system but also have Sentinel still process and store the data itself.
0 Likes
3 Replies
Micro Focus Expert
Micro Focus Expert

Re: Forward copy of data

On 2018-11-02 12:46, rochfordp wrote:
>
> Is it possible to forward a copy of data from Sentinel to another
> system? I'd like to set up a forwarder to another system but also have
> Sentinel still process and store the data itself.


You could use "Log to Syslog" action within a routing rule.


--
Norbert
0 Likes
rochfo Super Contributor.
Super Contributor.

Re: Forward copy of data

Thanks Norbert, that did the trick.
0 Likes
rochfo Super Contributor.
Super Contributor.

Re: Forward copy of data

Just going back to this. Sentinel seems to send a processed version of the events, is there any way to get it to send the raw events while still keeping a copy local. The option to send raw syslog in the integrator still sends the events processed with the sentinel tags.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.