The link doesn't seem to work:
/en-US/dj/splunkclouduf/ufpackage
Returns with 404.
Any recommendations?
Thanks,
Tibor
Login to your Splunk instance, and go to Universal Forwarder link which looks something like this,
[Customer Cloud Stack URL]/en-US/app/search/splunkclouduf?earliest=0⪭st=
Example:
https://prd-p-5dnv2v9jjfrp.cloud.splunk.com/en-US/app/search/splunkclouduf?earliest=0⪭
Change the URL to below, by replacing splunkclouduf from the URL with setupuf:
[Customer Cloud Stack URL]/en-US/app/search/setupuf?earliest=0⪭st=
and then download the credentials.
Hope this helps!
You have to access it from your company's network from what I remember...
I meant /en-US/dj/splunkclouduf/ufpackage, but I've found a workaround:
https://answers.splunk.com/answers/432685/trying-to-set-up-forwarder-for-splunk-light-downlo.html
sorry the editor filters out brackets, so it's INSTANCE_NAME/en-US/dj/splunkclouduf/ufpackage