Hi @zeusjuggler22, in my opinion, it's useful to use Splunk Cloud if you haven't an infrastructure and/or people to manage it. If you have Splunk Cloud, you haven't to manage infrastructure, but evere request of intervene (e.g. installation of an App) is ususlly executed in around 24 hours. Anyway, also having Splunk Cloud, remember that usually you should have two Heavy Forwarders as concentrators of the other Universal Forwarders and syslogs, then you need a Deployment Server. Ciao. Giuseppe
... View more