Splunk

Splunk is an aggregator, search engine, and dashboarding solution for log data. Sending data from Splunk Forwarders directly to Unomaly can be hugely beneficial performance-wise since the log data does not need to be written to disk on the Splunk indexers before Unomaly can analyze it.

This setup will forward logs in syslog format to Unomaly. In Splunk, edit outputs.conf to add the following:

[syslog]
defaultGroup = syslogGroup

[syslog:syslogGroup]
server = [unomaly_host]:5514

unomaly_host is the host name or IP address of the Unomaly instance to receive the data.

See Splunk's documentation for additional details about how to forward data to third-party systems.