https://community.splunk.com/t5/Getting-Data-In/splunk-cloud-universal-forwarder-no-data-in/m-p/402590#M94785 <P>I have setup splunk cloud yesterday and installed a universal forwarder on both linux (centos) and windows (windows server 2012 r2), but no data is getting into my splunk cloud "instance". please help.</P> <P>I do have some active forwards<BR /> [root@server bin]# ./splunk list forward-server<BR /> Active forwards:<BR /> input-prd-p-g6lslmzlhtlt.cloud.splunk.com:9997 (ssl)<BR /> Configured but inactive forwards:<BR /> None</P> Thu, 17 May 2018 09:31:17 GMT guidovbrakel 2018-05-17T09:31:17Z https://community.splunk.com/t5/Getting-Data-In/splunk-cloud-universal-forwarder-no-data-in/m-p/402590#M94785 <P>I have setup splunk cloud yesterday and installed a universal forwarder on both linux (centos) and windows (windows server 2012 r2), but no data is getting into my splunk cloud "instance". please help.</P> <P>I do have some active forwards<BR /> [root@server bin]# ./splunk list forward-server<BR /> Active forwards:<BR /> input-prd-p-g6lslmzlhtlt.cloud.splunk.com:9997 (ssl)<BR /> Configured but inactive forwards:<BR /> None</P> Thu, 17 May 2018 09:31:17 GMT https://community.splunk.com/t5/Getting-Data-In/splunk-cloud-universal-forwarder-no-data-in/m-p/402590#M94785 guidovbrakel 2018-05-17T09:31:17Z https://community.splunk.com/t5/Getting-Data-In/splunk-cloud-universal-forwarder-no-data-in/m-p/402591#M94786 <P>Did you already verify the connectivity from universal forwarder to indexer (e.g. telnet input-prd-p-g6lslmzlhtlt.cloud.splunk.com 9997, or cat &lt; /dev/tcp/input-prd-p-g6lslmzlhtlt.cloud.splunk.com/9997) ? When you say no data is getting there, did you 1) set up some inputs or 2) check if _internal has any data in it from remote hosts?</P> Sat, 19 May 2018 03:45:57 GMT https://community.splunk.com/t5/Getting-Data-In/splunk-cloud-universal-forwarder-no-data-in/m-p/402591#M94786 hortonew 2018-05-19T03:45:57Z