Skip to main content
Solved

SplunkTCP Source with UF using compress=true

  • Mar 11, 2025 3:24 AM UTC
  • 0 replies
  • 72 views

If Splunk Universal Forwarders are configured with compressed = true in the outputs.conf, can the Cribl Stream SplunkTCP source receive from them properly?

Best answer by Clint Sharp

Compression is not supported. See How to Architect Your LogStream to LogStream Data Flows for a good overview of features support.

Also, this was discussed in this thread in the Slack community: Slack.

View original

    • Clint Sharp
    • Cribl Founder
    • Answer
    • Mar 11, 2025 3:42 AM UTC

    Compression is not supported. See How to Architect Your LogStream to LogStream Data Flows for a good overview of features support.

    Also, this was discussed in this thread in the Slack community: Slack.

    Terms & ConditionsAccessibility statement