We noticed there wasn't App context option available for  HTTP event collector configuration  on Splunk Enterprise. It's auto configuring/pointing to Zscaler Add-On for Splunk (TA-Zscaler_CIM) context by default.    HTTP event collector configuration on our Splunk Enterprise   On Zscaler/Splunk setup guide:   ... View more

@asif99usa  Hello, The below link helps with you the capabilities of splunk cloud trial version. https://docs.splunk.com/Documentation/SplunkCloud/8.2.2111/Admin/TypesofSplunkClouddeployment   Hope this info helps. ... View more

You can configure this on an On premise Heavy forwarder and connect this HF to Splunk Cloud. As Rich said below, Splunk cloud(SH/IDM) doesn't support TCP/UDP streams as it will be risky and might blew up the license. ... View more

Use HEC - https://docs.splunk.com/Documentation/Splunk/8.2.3/Data/UsetheHTTPEventCollector ... View more