Getting Data In

Why am I unable to connect to Splunk cloud from universal forwarder?

yantriks
Engager

I have installed the universal forwarder according to

http://docs.splunk.com/Documentation/SplunkCloud/7.0.5/User/ForwardDataToSplunkCloudFromLinux

But in Step 5, I am not able find my host on Splunk cloud.

I also tried adding the forward server using "splunk add forward-server prd-p-npv9nbngb7j9.cloud.splunk.com:9997" and manually added monitor to inputs.conf.

telnet prd-p-npv9nbngb7j9.cloud.splunk.com 9997 -->gave a timeout

0 Karma

kmorris_splunk
Splunk Employee
Splunk Employee

You need to log into your cloud instance and download the credentials app, I believe it is under the Universal Forwarder app on the left hand side. This app will point to your cloud instance and also contains the certificates for secure sending of your data.

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...