Be sure you have followed the steps for installing the universal forwarder on Microsoft Windows. See http://docs.splunk.com/Documentation/SplunkLight/6.5.2/GettingStarted/GettingdataintoSplunkLightusingWindows Note, if using the installation wizard, be sure to configure the Deployment Server dialog (port 8089), and the Receiving Indexer dialog (port 9997). If using the command line, see http://docs.splunk.com/Documentation/Forwarder/6.5.2/Forwarder/InstallaWindowsuniversalforwarderfromthecommandline#Supported_command_line_flags and be sure to flag: RECEIVING_INDEXER="" and DEPLOYMENT_SERVER="" You should be able to see your forwarders on the System > Forwarder management page in Splunk Light. ... View more