How can I download Universal Forwarder Credentials?

[tkoch]

The link doesn't seem to work:
/en-US/dj/splunkclouduf/ufpackage

Returns with 404.

Any recommendations?
Thanks,
Tibor

[mjulian_splunk]

Login to your Splunk instance, and go to Universal Forwarder link which looks something like this,
[Customer Cloud Stack URL]/en-US/app/search/splunkclouduf?earliest=0⪭st=

Example:
https://prd-p-5dnv2v9jjfrp.cloud.splunk.com/en-US/app/search/splunkclouduf?earliest=0⪭

Change the URL to below, by replacing splunkclouduf from the URL with setupuf:
[Customer Cloud Stack URL]/en-US/app/search/setupuf?earliest=0⪭st=
and then download the credentials.

Hope this helps!

[jkat54]

You have to access it from your company's network from what I remember...

[tkoch]

I meant /en-US/dj/splunkclouduf/ufpackage, but I've found a workaround:
https://answers.splunk.com/answers/432685/trying-to-set-up-forwarder-for-splunk-light-downlo.html

[tkoch]

sorry the editor filters out brackets, so it's INSTANCE_NAME/en-US/dj/splunkclouduf/ufpackage