Manage Data Forwarding

note

Data forwarding is not currently supported for data assigned to the Infrequent Tier. 

tip

You can use Terraform to manage data forwarding with the sumologic_data_forwarding_destination and sumologic_data_forwarding_rule resources.

For more information about using Terraform to manage Sumo Logic components, see Use Terraform with Sumo Logic.

View, edit, or delete a data forwarding destination

The following actions are available on the Data Forwarding page. Hover over a destination in the table and select any of the following:

• Click the Information icon to display details about the configured destination, including the status and any indexes that are currently forwarding to the destination.
• Click the Edit icon to make changes to the configuration.
• Click the Delete icon to delete the destination. If the destination is currently active, you must deactivate it before it deleting it, as described in the following section.

Activate or Deactivate Data Forwarding

If you’d like to start or stop forwarding data, you can activate or deactivate the S3 bucket. 

1. New UI. In the main Sumo Logic menu select Data Management, and then under Logs select Data Forwarding. You can also click the Go To... menu at the top of the screen and select Data Forwarding.
   Classic UI. In the main Sumo Logic menu, select Manage Data > Logs > Data Forwarding.
2. Hover over the destination and click the Edit icon.
3. Select or deselect the Active checkbox.
4. Click Save.

Audit logging for data forwarding

Sumo Logic logs audit events for both system and user data forwarding events. For more information, see Audit Event Index.