https://community.splunk.com/t5/Getting-Data-In/HEC-on-Heavy-forwarder-not-forwarding-to-Splunk-Cloud/m-p/589693#M103390 <P>Make sure you're using the "Universal Forwarder" app downloaded from your Splunk Cloud search head.</P><P>Check the HF's splunkd.log for messages explaining why it cannot connect to Splunk Cloud.</P><P>Have you check the last chance index for the HEC data?</P> Fri, 18 Mar 2022 13:08:48 GMT richgalloway 2022-03-18T13:08:48Z https://community.splunk.com/t5/Getting-Data-In/HEC-on-Heavy-forwarder-not-forwarding-to-Splunk-Cloud/m-p/589682#M103389 <P>Hi,</P><P>I have setup a HEC input on a Heavy Forwarder and have a base app for all data outputs to forward to Splunk Cloud Indexers but not seeing the HEC data in Cloud.</P><P>Am I missing out a particular setting that forwards HEC data</P><P>Thanks,</P> Fri, 18 Mar 2022 11:59:30 GMT https://community.splunk.com/t5/Getting-Data-In/HEC-on-Heavy-forwarder-not-forwarding-to-Splunk-Cloud/m-p/589682#M103389 nathanluke86 2022-03-18T11:59:30Z https://community.splunk.com/t5/Getting-Data-In/HEC-on-Heavy-forwarder-not-forwarding-to-Splunk-Cloud/m-p/589693#M103390 <P>Make sure you're using the "Universal Forwarder" app downloaded from your Splunk Cloud search head.</P><P>Check the HF's splunkd.log for messages explaining why it cannot connect to Splunk Cloud.</P><P>Have you check the last chance index for the HEC data?</P> Fri, 18 Mar 2022 13:08:48 GMT https://community.splunk.com/t5/Getting-Data-In/HEC-on-Heavy-forwarder-not-forwarding-to-Splunk-Cloud/m-p/589693#M103390 richgalloway 2022-03-18T13:08:48Z