Getting Data In

After installing universal forwarder, why am I getting an error "you currently don't have any forwarders installed" in Splunk Cloud?

ptur
Path Finder

I'm following "Forward data to Splunk Cloud from Microsoft Windows" document ( http://docs.splunk.com/Documentation/SplunkCloud/6.5.1612/User/ForwardDataToSplunkCloudFromWindows)

Point 5 of "Step2" which is related to setting up Deployment Server" speaks of "Self-service Splunk Cloud deployments only" - which i'm assuming i'm not, so i have skipped that step.

I'm stuck on "Step 4" When "Add Data" is selected all i get is "You currently don't have any forwarders installed."

I'm am however receiving the logs i have set up to forward on that forwarder.

Thanks!

0 Karma
1 Solution

maraman_splunk
Splunk Employee
Splunk Employee

looks like you have a managed splunk cloud deployment.
In that case, you should install and use a deployment server on premise.
step4 in that case is on your deployment server.
For testing, you can of course configure input locally like you seem to have done but depending on your context, you may need to set up a deployment server
if you need a license key for it (to unlock the feature), contact splunk cloud.
if you dont need/want a deployment server, then looks like you have enough to get data to your instance

View solution in original post

0 Karma

maraman_splunk
Splunk Employee
Splunk Employee

looks like you have a managed splunk cloud deployment.
In that case, you should install and use a deployment server on premise.
step4 in that case is on your deployment server.
For testing, you can of course configure input locally like you seem to have done but depending on your context, you may need to set up a deployment server
if you need a license key for it (to unlock the feature), contact splunk cloud.
if you dont need/want a deployment server, then looks like you have enough to get data to your instance

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...