I am trying to set up a universal forwarder (Windows) to send data to our new Splunk Light trial account. I am following the instructions on the following page and am stuck on the part where I am to download the credentials:
"Getting data into Splunk Light cloud service using Windows"
The Download Universal Forwarder Credentials link returns 404. I've tried it with different browsers and it's always not found. Can anyone help me?
We are working on resolving this issue.
In the meantime, as a workaround, can you login to Splunk Light trial, and go to Universal Forwarder link which looks something like this,
https://prd-p-5dnv2v9jjfrp.cloud.splunk.com/en-US/app/search/splunkclouduf?earliest=0&latest=
Change the URL to below, by replacing splunkclouduf from the URL with setupuf:
https://prd-p-5dnv2v9jjfrp.cloud.splunk.com/en-US/app/search/setupuf?earliest=0&latest=
We are working on resolving this issue.
In the meantime, as a workaround, can you login to Splunk Light trial, and go to Universal Forwarder link which looks something like this,
https://prd-p-5dnv2v9jjfrp.cloud.splunk.com/en-US/app/search/splunkclouduf?earliest=0&latest=
Change the URL to below, by replacing splunkclouduf from the URL with setupuf:
https://prd-p-5dnv2v9jjfrp.cloud.splunk.com/en-US/app/search/setupuf?earliest=0&latest=
Hmm dkoshe, not sure I got what you were suggesting
Here is the original bad link:
https://xxx-x-xxxxxxxxxxxx.cloud.splunk.com/en-US/dj/splunkclouduf/ufpackage
Tried all of these and they all fail too
https://xxx-x-xxxxxxxxxxxx.cloud.splunk.com/en-US/dj/setupuf/ufpackage
https://xxx-x-xxxxxxxxxxxx.cloud.splunk.com/en-US/dj/setupuf
https://xxx-x-xxxxxxxxxxxx.cloud.splunk.com/en-US/dj/splunkclouduf/setupuf
apologies for misleading instructions, I have updated my answer before, and verified that workaround works in my trial environment. Please give it a try.
That worked better! Thanks much.
Might this be related to https://answers.splunk.com/answers/418576/cant-get-universal-forwarder-credentials-file.html?
Saw that one earlier too, but I believe this is unrelated, I'm en-us, thanks though!