I am new to splunk. My organization is using Splunk SaaS and I have been asked to setup forwarder to forward logs to Splunk Cloud. Can anyone help me find documentation or ebook on Splunk SaaS? I tried on google but unable to find any.
Start here: http://docs.splunk.com/Documentation/SplunkCloud/7.0.0/User/DataSplunkCloudcanindex
You will see on the left nav on that page that you can set up forwarders on a variety of systems. Follow the instructions that match what you are trying to do: