I configured a forwarder to send data to my Splunk Cloud instance and data is not showing there. Is additional configuration required to make it work with Splunk Cloud?
I have tested with a sample log file that the forwarder works ok.
My Splunk_TA_Stream inputs.conf:
splunk_stream_app_location = https://input-<xxxxx>.cloud.splunk.com:9997
disabled = 0
2015-09-04 19:00:28 ERROR 0x113783000 stream.CaptureServer - Unable to ping server (66d378ba-eb52-4a95-bbef-57cb919ccfba): Unable to establish connection to input-<xxxxx>.cloud.splunk.com: sslv3 alert handshake failure
... View more