We missed this conversation when it happened but have now belatedly updated the documentation. ... View more

The Windows MSI installer creates the MSICreated app during installation. This app provides a context in which to modify the outputs.conf file to determine forwarding behavior. You don't want to modify the outputs.conf in the default directory, and this app gives you a non-default outputs.conf to modify. This answer is based on what's in the documentation. I don't have any particular knowledge in this area. See http://docs.splunk.com/Documentation/Forwarder/7.1.2/Forwarder/Configureforwardingwithoutputs.conf. ... View more

Can you clarify what you mean by "the documentation speak to trigger the support" and where you are sending emails? The Splunk Light documentation (http://docs.splunk.com/Documentation/SplunkLight/7.1.2/Installation/Aboutlicensing#Splunk_Light_license_types mentions that the free license is valid for one year. Is it possible that you need to request a renewal of your free license? Any additional information you can provide about which version you were on before upgrading to 7.1.2, which operating system you are using, and how long you have been using the Splunk Light Free license might help the community to troubleshoot your situation. ... View more

Another user reported not being able to switch from the trial license to the free license in version 7.1.2 of Splunk Enterprise. He resolved his issue by clearing his browser cache and cookies (Chrome browser, in this case). This isn't exactly what you're reporting, but there are enough similarities that I thought I'd mention it. ... View more

Cuyose, the Splunk doc team is very receptive to feedback. If you submit your suggestion using the feedback form on the bottom of the topic that needs improvement, the doc team will receive it and can take action on it. Sorry that the process was more difficult than it needed to be! ... View more

You didn't mention if you've already tried looking at the documentation: http://docs.splunk.com/Documentation/SplunkLight/7.1.1/GettingStarted/GettingdataintoSplunkLightusingWindows ... View more

In Splunk Enterprise version 7.1.0 and later, your initial login credentials are username=admin and password=the password that you specified during installation. The credentials that you use to log into the Splunk Enterprise software are not related in any way to the credentials that you created on splunk.com when registering to download the product. ... View more

Regrets for the confusion, @CraftTeam. Splunk Light Cloud Service is covered by the same terms of service as Splunk's other cloud-based product offerings. You can find the TOS on the Splunk website at https://www.splunk.com/en_us/legal/terms/splunk-cloud-terms-of-service.html ... View more

Which version of Splunk Light Cloud Service are you using? If 7.0.x, be sure to use the documentation for that version. Your doc link above points to version 6.5.1612. The link that I provided in my first reply points to the 7.0.x docs. They have some additional information, in particular for step 4 of the process. ... View more

I don't have access to a Splunk Light Cloud Service instance to know if it differs, but as a starting point have you reviewed the documentation for integrating the on premises version of Splunk Light with the Splunk App for AWS? http://docs.splunk.com/Documentation/SplunkLight/7.0.2/Installation/GettingstartedSplunkAppforAWS ... View more

Do you have the Admin role in Splunk Light, or the User role? ... View more

Or https://www.splunk.com/en_us/download/splunk-light.html. There appears to be an issue with the main download page not showing Splunk Light. You can get to the download on the Splunk website by clicking Products > Core Products > Splunk Light. Then use the Free Download button on the resulting page. ... View more

admin/changeme is the default login for the Universal Forwarder, not for your Splunk Light cloud account. After your first login to the UF, you should change that to something secure. You access your Splunk Light cloud trial via single sign-on after logging into your Splunk.com user account. The username and password is the one you chose when you signed up. We will take another look at the documentation to make sure that this is clearer. ... View more

I haven't installed a *nix Universal Forwarder, but after initial install you might need to explicitly start it: $SPLUNK_HOME/bin/splunk start ... View more

Might this be related to https://answers.splunk.com/answers/418576/cant-get-universal-forwarder-credentials-file.html? ... View more

@GeorgeStarkey, this is documented on our developer documentation site. The specific link in this case is http://dev.splunk.com/view/event-collector/SP-CAAAE8X#aboutchannels. ... View more

In addition to woodcock's excellent answer, you can also refer to the Splunk Light documentation topic Getting data into Splunk Light using Linux ... View more

See the topics in the Getting Data In chapter of the Splunk Light User Guide. The topic About adding data to Splunk Light is a good starting point with links to more specific procedures. ... View more

For more details on the process that @jterry refers to, see the topics in the Getting Data In chapter of the Splunk Light User Guide. A good starting topic is http://docs.splunk.com/Documentation/SplunkLight/6.4.0/GettingStarted/Aboutaddingdata ... View more

Based on the error message, this does seem to be a matter of your role not having the necessary permissions to add data to the instance. Sorry if this is a basic question, but are you sure you are using Splunk Light? The screen shot appears to be Splunk Enterprise. ... View more

Based on feedback such as yours we are working to make the Splunk Light forwarding documentation clearer and more self-contained. In the meantime, the following topics in the Splunk Light docs should provide the info that you need to get started: Install and deploy a universal forwarder. Receive data from a forwarder. In particular you might have missed the step in this topic about configuring your Splunk Light instance to receive data. The process of configuring your forwarders as deployment clients is optional, but is required if you want to use the Add Data workflow in the Splunk Light user interface (instead of managing data inputs at the command line or config file level on each forwarder). ... View more

Hi ukrishnakanth, start with the Splunk Light documentation to see if it answers your questions. The "Getting data in" chapter of the Getting Started Guide is a good place to start. http://docs.splunk.com/Documentation/SplunkLight/6.3.3/GettingStarted/Aboutaddingdata ... View more