Default Version 1.2.0
March 25, 2026
March 25, 2026
Splunk Enterprise, Splunk Cloud
Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2
Log in to rate this app
This Add-On works together with the Owl Diode Sender Add-On (https://splunkbase.splunk.com/app/5554/). It is designed to send data between Splunk servers that can pass through a data diode, while preserving the Splunk metadata. The sender will encapsulate Splunk metadata like sourcetype, source, host, _time into the _raw message which can then be forwarded over syslog via UDP or TCP. The receiver will unpack this and populate the metadata fields as well and restore the _raw to its original state.
Log in to report this app listing.