Why can't I find the Universal Forwarder tab to download credentials?

[nickbgraham]

I am trying to follow this tutorial: http://jasonpoon.ca/2017/04/03/kubernetes-logging-with-splunk/

I logged into a Splunk Cloud account (companyName.splunkcloud.com). But I can't find the Universal Forwarder tab to download credentials. I made my own free trial account and was able to find it easily, but I can't connect to the cloud account.

[esalesapns2]

You can only find it if you're on Splunk Cloud. On-prem deployments don't have it. Could someone do a tar -tvf "creds-package.spl" and post it here for me?

[jdinkel]

It's a pretty old question... what are you looking to do by getting a copy of the creds-package.spl from somebody's installation?

[esalesapns2]

You only see this if you're running Splunk Cloud. On-prem installs don't have it. Can anyone tell me what's in the package?

[jdinkel]

Hello,

I can help you with this.
Click on the App menu and then select "Universal Forwarder".
You can also use https://companyName.splunkcloud.com/en-US/app/splunkclouduf/setupuf

There are lots of ways to get to this window:
http://docs.splunk.com/Documentation/SplunkCloud/6.6.3/User/ForwardDataToSplunkCloudFromWindows

I am also trying to get a universal forwarder working and not having success.
The Splunk documentation for Client to SplunkCloud setup is quite confusing because it mixes terms like self-service with cloud and it fails to provide a clear example tutorial with troubleshooting steps for firewall, proxy, and other common problems. There are lots of forum topics, but it seems really hard to get the information needed in one place. Good luck to you.