Splunk Cloud Platform

Use Ingest Processors

How the destination for Ingest Processor works

In order to send data from an Ingest Processor to a storage location such as an index, or Splunk Observability Cloud, you must define the location as a destination in the Ingest Processor service. Each destination contains the connection information necessary for allowing Ingest Processor to send data to a given location.

The steps for adding a destination to the Ingest Processor service varies depending on whether the destination is part of the Splunk Cloud Platform deployment that's connected to your cloud tenant:

  • When you connect your tenant to a Splunk Cloud Platform deployment as part of the first-time setup of the Ingest Processor solution, all the indexes that the service account can access become available as destinations. For information about working with destinations that are associated with this connection, see Send data from Ingest Processors to the Splunk Cloud Platform deployment connected to your tenant.
  • For destinations that are not part of the connected deployment, such as Splunk Observability Cloud, you must use the Destinations page in the Ingest Processor service to add and configure them. See the following pages for more information:

You can confirm the destinations that are available by checking the Destinations page, and view additional details about a given destination by selecting it on the Destinations page.

Last modified on 28 October, 2024
Process multiple copies of data using Ingest Processor   Add or manage destinations

This documentation applies to the following versions of Splunk Cloud Platform: 9.1.2308, 9.1.2312, 9.2.2403, 9.2.2406 (latest FedRAMP release)


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters