Getting Data In

How can I download Universal Forwarder Credentials?

tkoch
New Member

The link doesn't seem to work:
/en-US/dj/splunkclouduf/ufpackage

Returns with 404.

Any recommendations?
Thanks,
Tibor

0 Karma

mjulian_splunk
Splunk Employee
Splunk Employee

Login to your Splunk instance, and go to Universal Forwarder link which looks something like this,
[Customer Cloud Stack URL]/en-US/app/search/splunkclouduf?earliest=0⪭st=

Example:
https://prd-p-5dnv2v9jjfrp.cloud.splunk.com/en-US/app/search/splunkclouduf?earliest=0⪭

Change the URL to below, by replacing splunkclouduf from the URL with setupuf:
[Customer Cloud Stack URL]/en-US/app/search/setupuf?earliest=0⪭st=
and then download the credentials.

Hope this helps!

0 Karma

jkat54
SplunkTrust
SplunkTrust

You have to access it from your company's network from what I remember...

0 Karma

tkoch
New Member

I meant /en-US/dj/splunkclouduf/ufpackage, but I've found a workaround:
https://answers.splunk.com/answers/432685/trying-to-set-up-forwarder-for-splunk-light-downlo.html

0 Karma

tkoch
New Member

sorry the editor filters out brackets, so it's INSTANCE_NAME/en-US/dj/splunkclouduf/ufpackage

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...