Getting Data In

Why can't I find the Universal Forwarder tab to download credentials?

nickbgraham
New Member

I am trying to follow this tutorial: http://jasonpoon.ca/2017/04/03/kubernetes-logging-with-splunk/

I logged into a Splunk Cloud account (companyName.splunkcloud.com). But I can't find the Universal Forwarder tab to download credentials. I made my own free trial account and was able to find it easily, but I can't connect to the cloud account.

0 Karma

esalesapns2
Path Finder

You can only find it if you're on Splunk Cloud. On-prem deployments don't have it. Could someone do a tar -tvf "creds-package.spl" and post it here for me?

0 Karma

jdinkel
Explorer

It's a pretty old question... what are you looking to do by getting a copy of the creds-package.spl from somebody's installation?

0 Karma

esalesapns2
Path Finder

You only see this if you're running Splunk Cloud. On-prem installs don't have it. Can anyone tell me what's in the package?

0 Karma

jdinkel
Explorer

Hello,

I can help you with this.
Click on the App menu and then select "Universal Forwarder".
You can also use https://companyName.splunkcloud.com/en-US/app/splunkclouduf/setupuf

There are lots of ways to get to this window:
http://docs.splunk.com/Documentation/SplunkCloud/6.6.3/User/ForwardDataToSplunkCloudFromWindows

I am also trying to get a universal forwarder working and not having success.
The Splunk documentation for Client to SplunkCloud setup is quite confusing because it mixes terms like self-service with cloud and it fails to provide a clear example tutorial with troubleshooting steps for firewall, proxy, and other common problems. There are lots of forum topics, but it seems really hard to get the information needed in one place. Good luck to you.

0 Karma
Get Updates on the Splunk Community!

2024 Splunk Career Impact Survey | Earn a $20 gift card for participating!

Hear ye, hear ye! The time has come again for Splunk's annual Career Impact Survey!  We need your help by ...

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...