Hello Everyone,  please for the past four weeks I have been struggling with ensuring that the Universal splunk Forwarder which I installed in my windows 10 virtual machine with sysmon to send logs to my Splunk Enterprise, which is also installed in my host machine (laptop) has been giving me various wrong output, despite the fact that I have configured both the input.conf and output.conf I have also made sure my windows 10 virtual machine can ping my splunk enterprise machine and I also used the command netstat anob find str9997 and it showed me listening I also ensure my firewall is not blocking any port I also enabled the default port 9997 receiving in my splunk enterprise despite all these it is still showing me Active forwards none Configured but inactive forwards 192.168.56.1.9997. I also want to ask a question because my windows 10 virtual machine is set to host only network could that be an obstruction and initially when I configured it, it was fine but now it is giving me such wrong response could it be the authentication. I  also wanted to ask should I use the password of my splunk enterprise when I am asked for an authentication usernane and password in my splunk forwarder ... View more