Don't forget about the HTTP Event Collector (HEC) – https://www.splunk.com/en_us/blog/tips-and-tricks/syslog-ng-and-hec-scalable-aggregated-data-collection-in-splunk.html
July 09, 2020 at 08:57AM
via reddit https://www.reddit.com/r/Splunk/comments/hnw9rz/are_there_any_best_practices_on_when_to_leverage/fxf226o?utm_source=ifttt