This is likely what you were/are looking for.   https://cloud.google.com/chronicle/docs/install/install-forwarder ... View more

What is your SSL server cert configured as? Can you read the output of that cert using openssl? (if using the default cert)   openssl x509 -in /opt/splunk/etc/auth/server.pem -text -noout     ... View more

What SSO platform are you using? And is your licensing set properly for all hosts? ... View more

'Broker' is the only dimension supported by AWS.   https://docs.aws.amazon.com/amazon-mq/latest/developer-guide/security-logging-monitoring-cloudwatch.html ... View more

This worked for me as well, thanks! ... View more