Deployment Architecture

Splunk cloud forwarders

rakeshksingh
New Member

Hi All,

How to make connection between Splunk cloud and Splunk enterprise local to exchange data just like forwarders ?

Thanks
Rk

Tags (1)
0 Karma

lcavaliere_splu
Splunk Employee
Splunk Employee

Hello rakeshksingh,

From your Splunk Cloud UI, launch the "Universal Forwarder" app and this will bring you to a page with instructions on how to configure forwarding to your Splunk Cloud instance. This includes a link to a credentials package that you will need to download and install onto each forwarder (this is essentially an app which sets up your outputs.conf to point to the Splunk Cloud indexer cluster and also has the required security certificates).

Please note also that applies also to Splunk Enterprise instances (e.g. Heavy Weight Forwarders) that you would like to use to forward data to Splunk Cloud (i.e. this is not only just for configuring Universal Forwarders).

And here is a link to document page that is a good starting point for configuring this:
https://docs.splunk.com/Documentation/Forwarder/7.2.3/Forwarder/HowtoforwarddatatoSplunkCloud

Cheers

FrankVl
Ultra Champion

Can you elaborate a bit more on the setup you have so far and what you want to accomplish?

0 Karma

rakeshksingh
New Member

Hi FrankVi,

I have my local splunk trail version and Splunk cloud . Local splunk runs on localhost then how to map local splunk and cloud splunk for forwarding logs in between.

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...