Getting Data In

Trying to set up forwarder for Splunk Light - Download Universal Forwarder Credentials link returns 404

lorenh
Engager

I am trying to set up a universal forwarder (Windows) to send data to our new Splunk Light trial account. I am following the instructions on the following page and am stuck on the part where I am to download the credentials:

"Getting data into Splunk Light cloud service using Windows"

The Download Universal Forwarder Credentials link returns 404. I've tried it with different browsers and it's always not found. Can anyone help me?

0 Karma
1 Solution

dkoshe_splunk
Splunk Employee
Splunk Employee

We are working on resolving this issue.
In the meantime, as a workaround, can you login to Splunk Light trial, and go to Universal Forwarder link which looks something like this,
https://prd-p-5dnv2v9jjfrp.cloud.splunk.com/en-US/app/search/splunkclouduf?earliest=0&latest=

Change the URL to below, by replacing splunkclouduf from the URL with setupuf:
https://prd-p-5dnv2v9jjfrp.cloud.splunk.com/en-US/app/search/setupuf?earliest=0&latest=

View solution in original post

dkoshe_splunk
Splunk Employee
Splunk Employee

We are working on resolving this issue.
In the meantime, as a workaround, can you login to Splunk Light trial, and go to Universal Forwarder link which looks something like this,
https://prd-p-5dnv2v9jjfrp.cloud.splunk.com/en-US/app/search/splunkclouduf?earliest=0&latest=

Change the URL to below, by replacing splunkclouduf from the URL with setupuf:
https://prd-p-5dnv2v9jjfrp.cloud.splunk.com/en-US/app/search/setupuf?earliest=0&latest=

View solution in original post

lorenh
Engager
0 Karma

dkoshe_splunk
Splunk Employee
Splunk Employee

apologies for misleading instructions, I have updated my answer before, and verified that workaround works in my trial environment. Please give it a try.

0 Karma

lorenh
Engager

That worked better! Thanks much.

0 Karma

andrewb_splunk
Splunk Employee
Splunk Employee
0 Karma

lorenh
Engager

Saw that one earlier too, but I believe this is unrelated, I'm en-us, thanks though!

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!