Hi,
We have a project to implement splunk so that it talks out to splunk cloud, via a proxy server.
To do this, i believe we need to configure the heavy forwarder to connect to the proxy using socks5, port 1080, as per this article:
https://docs.splunk.com/Documentation/Splunk/9.0.2/Forwarding/ConfigureaforwardertouseaSOCKSproxy
I beleive i've done this correctly, i think, and we also think the proxy is configured correctly. Yet we aren't seeing the data flow into splunk.
Am i missing something with the config on the forwarder, or is it really just as that article presents it? Looking in the deployment server, i can see the test endpoints we've added are visible, so all that seems to be working, its now getting this out and into the cloud we need.
All new to me splunk, so trying to work it out on the fly, therefore an pointers in the right direction would be appreciated
