Okay, our goal is to capture data from a local database using DB connect to query the data and Splunk Heavy Fowarder to push the data up to a Splunk Cloud instance. Where we are: Installed Splunk Enterprise Installed Splunk DB connect on Splunk Heavy Forwarder Deployed Splunk Cloud Instance Configured Forwarding/Receiving and Forwarding default settings on the Splunk Heavy Forwarder Configured Forwarding settings on Splunk Heavy Forwarder to point to Splunk cloud server (www.server.splunkcloud.com:9997) Outputs.conf file in the LOCAL directory is pointing to our Splunk cloud hostname and port The help we need: The Outputs.conf file in the FORWARDER directory has a very different format that the outputs.conf file in the local directory. Do we need to update this outputs.conf file as well if so what data do we input and in what line? (See attached screenshot) How do we create an index on the Splunk Cloud so that data is pushed from the Heavy Forwarder directly into that index in the cloud? Thank you! ... View more