Few servers are hosting in private VPC which are not connected to organisation IT network
how can we onboard those Linux hosts
If you are asking for splunkcloud, you can download private connectivity universal forwarder app.
https://docs.splunk.com/Documentation/SplunkCloud/9.2.2403/Security/Privateconnectivityenable
https://docs.splunk.com/File:PC4.png
If this helps, Please Upvote.