Move data from Splunk to Elastic Search

Question

I have a script in splunk which runs in regular intervals and puts data in the Splunk. Now i want to transfer this data to Elastic Search also. So the data gets input in both splunk and Elastic Search. Any ideas on how to do it?

Answer 1

Using Spring Data Elasticsearch in Java, and Spring Batch with Quartz Scheduler, you could set up a batch job that reads in data from the Splunk REST API, and writes the data into an Elasticsearch index.