I'm using a Universal Forwarder in a remote location (different network) to try and get data into my Splunk instance. Both machines are Windows.
The necessary firewall rules are in place and the Universal Forwarder logs show that the UF is connected to my server. However, when I look at the logs on my Splunk server, I can see the 800706BA error 'The RPC server is unavailable'
How might I solve this problem?
Both networks are independent of one another, so I'm not sure if this is an authentication issue or not. Any tips of one the next steps might be would be great appreciated.