Getting Data In

How to set up TCP monitoring in Splunk Light Cloud?

New Member


I am an experienced Splunk Enterprise user and administrator using Splunk Cloud Light for the first time.

I am trying to follow the directions here to set up monitoring a syslog stream via TCP to monitor a Heroku instance.

The process is described in a Splunk Blog entry here:

Clicking Add New next to TCP on this screen
alt text

Takes me to a selection screen for Forwarders, but I simply need the monitoring not the forwarder configuration.
alt text

Also following the directions on this screen doesn't show a TCP option (only HTTP):

This person also seemed to encounter the same UI bug as me, but he is actually trying to configure a forwarder whereas I am not.

Please advise.

Thank you,

0 Karma

Splunk Employee
Splunk Employee

Hello John,

In Cloud deployment, TCP monitoring is not supported.
You options are to either to use HTTP Event Collector, (I believe hiroku supports HTTPS data drains).
Or, you can host a Splunk Forwarder, and enable TCP input for receiving hiroku data as syslog (which will then route it to your Splunk Light cloud instance).


0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!