Yes, Splunk could do with more clear documentation and examples for sure. ... View more

The Add Data screen after a universal forwarder is available to select. ... View more

@networkthinking -- re your comment "not able to award points" -- are you able to "Accept" the answer? If not we can file a bug report. Let me know! ... View more

Hi Nancy, The localhost is the machine where you have Splunk Light installed. You should be able to start Splunk Light using a web browser as follows: With a supported web browser, navigate to: http://hostname or ip address:8000, or enter localhost:8000 Use whatever host and port you chose during installation. When you tried to re-install Splunk Light, it seems you did not remove all instances of Splunk Light first (the Splunk directory), as you cannot install over an existing version unless you are upgrading. ... View more

Be sure you have followed the steps for installing the universal forwarder on Microsoft Windows. See http://docs.splunk.com/Documentation/SplunkLight/6.5.2/GettingStarted/GettingdataintoSplunkLightusingWindows Note, if using the installation wizard, be sure to configure the Deployment Server dialog (port 8089), and the Receiving Indexer dialog (port 9997). If using the command line, see http://docs.splunk.com/Documentation/Forwarder/6.5.2/Forwarder/InstallaWindowsuniversalforwarderfromthecommandline#Supported_command_line_flags and be sure to flag: RECEIVING_INDEXER="" and DEPLOYMENT_SERVER="" You should be able to see your forwarders on the System > Forwarder management page in Splunk Light. ... View more

App for AWS configuration menu in Splunk Light. ... View more

I think this is an issue with that server. The forwarder service is not appearing in the list of services yet the process for the service is running. I will focus on resolving that issue first. Thanks for your help. ... View more