Getting Data In

Why can't I find the Universal Forwarder tab to download credentials?

New Member

I am trying to follow this tutorial: http://jasonpoon.ca/2017/04/03/kubernetes-logging-with-splunk/

I logged into a Splunk Cloud account (companyName.splunkcloud.com). But I can't find the Universal Forwarder tab to download credentials. I made my own free trial account and was able to find it easily, but I can't connect to the cloud account.

0 Karma

Path Finder

You can only find it if you're on Splunk Cloud. On-prem deployments don't have it. Could someone do a tar -tvf "creds-package.spl" and post it here for me?

0 Karma

Explorer

It's a pretty old question... what are you looking to do by getting a copy of the creds-package.spl from somebody's installation?

0 Karma

Path Finder

You only see this if you're running Splunk Cloud. On-prem installs don't have it. Can anyone tell me what's in the package?

0 Karma

Explorer

Hello,

I can help you with this.
Click on the App menu and then select "Universal Forwarder".
You can also use https://companyName.splunkcloud.com/en-US/app/splunkclouduf/setupuf

There are lots of ways to get to this window:
http://docs.splunk.com/Documentation/SplunkCloud/6.6.3/User/ForwardDataToSplunkCloudFromWindows

I am also trying to get a universal forwarder working and not having success.
The Splunk documentation for Client to SplunkCloud setup is quite confusing because it mixes terms like self-service with cloud and it fails to provide a clear example tutorial with troubleshooting steps for firewall, proxy, and other common problems. There are lots of forum topics, but it seems really hard to get the information needed in one place. Good luck to you.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!