Use the Data Forwarding settings of a role to send data from an agent table on each system to Splunk or Azure Log Analytics. In order to use it you would need to import a role which is available from your customer success team.
Data forwarding sends only agent-side tables. For the tables to forward to Splunk, see Suggested SysTrack Tables for Splunk. For Splunk setup, see Splunk Integration.
Create a Data Forwarding Rule
Go to Configure > System Configuration > Roles.
Click the lock icon in the upper-right corner to unlock Configure for editing.
Select the role.
From the Additional Settings list, select Data Forwarding.
Click the plus icon to open Create Data Forwarding Rule.
Complete the rule:
Table: Choose the agent-side table to forward to the Splunk or Azure server.
Destination: For Splunk, the name of the Splunk index that receives the data.
Schedule Type: Choose when you want to send the data. Options are Always On, Active User, Sensor Based, Health, and SQL.
If you choose Sensor Based you can select the sensor from the drop-down.
If you choose Health, enter the health score below which the data is sent. The default is 85.
If you choose SQL it will test the query periodically and send data.
Click OK, and then click Save Changes.
Systems that use the role apply the change the next time they read their configuration. To apply it right away, run Read Configuration on those systems. See Operations: Command Dashboard.
To check that data arrives in Splunk, search the index that you entered in Destination. For questions about forwarding SysTrack admin logs, see Information Regarding Forwarding SysTrack Admin Logs to Splunk.