Skip to main content
Sumo Logic

Configure Data Forwarding for Installed Collectors

Use the Sumo Logic Web Application to set up the data forwarding destinations, and then use the web application, the collector management API, or local source configuration files to configure the processing rules to use one of the defined data forwarding destinations. 

The rest of this article describes how to set up destinations and configure sources for data forwarding using the web application. 

Follow this process to set up data forwarding destinations. You must configure destinations before configuring processing rules. 

To set up destinations

  1. Choose Manage > Data Configuration > Data Forwarding (Manage > Data Forwarding in the classic UI).
  2. Click + to add a new destination.
  3. Select one of these options for Destination Type. (See Configure Data Forwarding from Sumo Logic to S3 for instructions on configuring forwarding from Sumo Logic to S3).
    • Hitachi
    • Generic REST
    • Syslog
  4. Enter a name to identify the destination.
  5. (Generic REST and Hitachi) URL. Enter a URL to access the destination.
  6. (Generic REST and Hitachi) Object id. (optional) Enter a path name or other file format and include any of the following variables: 
    {day} Replace with the day of the year in the yyyy-MM-dd format
    {hour} Replace with hour in day (0-23)
    {minute} Replace with minute in hour
    {second} Replace with second in hour
    {uuid} Replace with a unique, randomly generated identifier (UUID)
  7. (Generic REST and Hitachi) Enter Username and Password to access the destination. The user must have administrator privileges for the collector.
  8. (syslog) Protocol. Select the protocol (TCP or UDP) for sending the syslog messages.
  9. (syslog) Port. Enter the port for sending the syslog messages.
  10. (syslog) Token. Enter the token to prepend when forwarding a message via syslog. The token uses the following special variables:
    {file} Maps to the name of the originating file, when applicable. 
    {hostname} Name of the host that originated the message.
    {category} Category of the source that collected this message.
  11. Click Save to save the information and add the new destination to the list.