I searched around and trying to pin down options on sending Universal Forwarder logs to Splunk Cloud.
Diagrams, likes and experiences deeply app preciated.
Hi
here https://docs.splunk.com/Documentation/SplunkCloud/8.2.2112/Data/UsingforwardingagentsCloud is described how to get data into SC from UFs. There is also other sections which told other ways.
r. Ismo