Splunk Dev

Where are my splunkcloud credentials?

emayssat
Engager

I am reconfiguring the universal splunk forwarder to connect to splunk cloud.
With the CLI, I am able to setup forward-server and monitors, but my forward server are always 'inactive'.

I obviously need to install the right credentials.
Where can I find those credentails?
http://docs.splunk.com/Documentation/SplunkCloud/6.4.0/User/ForwardDataToSplunkCloudFromLinux
Step 4 doesn't help as I don't have a 'Universal Forwarder' button/link on the left !!!!

Tags (1)
0 Karma

pgreer_splunk
Splunk Employee
Splunk Employee

If you are setting up your own universal forwarder (or heavy forwarder for that matter) you will need your Splunk Cloud instance credentials (as you noted). This is available as an app that you install into your universal forwarder and is downloadable from your Splunk Cloud instance.

In the docs.splunk.com URL you posted, steps 1-4:

1) Log into your Splunk Cloud deployment
2) Download the Splunk Universal Forwarder for Linux.
3) Install the Splunk Universal Forwarder for Linux.
4) Download and install the universal forwarder credentials.

The universal forwarder credentials are within your Splunk Cloud instance.

Log into your Splunk Cloud instance (as an admin role account). On the main page on the left apps browser list there will be a 'Universal Forwarder' app. Click on that and the app menu below will be presented:

To set up the Universal Forwarder:

    Download the Splunk universal forwarder.

    Splunk Downloads web page
    Install the universal forwarder on one or more machines in your network.

    Installation Instructions
    Download your customized universal forwarder credentials package.

    **Download Universal Forwarder Credentials**
    Install the universal forwarder credentials package on each universal forwarder in your network.

    Installation Instructions
    Configure your universal forwarders to send data to the Splunk platform.

    Configure data inputs

The Download Credentials button is where you need to grab your Splunk Cloud credentials (app).

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...