What is the primary method to get UDP data into Splunk Cloud?

The primary method to get UDP data into Splunk Cloud involves collecting the data on-premises and then forwarding it to the cloud environment. This approach typically utilizes a forwarder, such as the Splunk Universal Forwarder, which is designed to collect data from various sources on a local network. Once the UDP data is captured by the forwarder, it can be securely sent to Splunk Cloud for indexing and analysis.

Each method of data ingestion has its own use cases, but UDP data often requires initial collection because it is generated from sources that aren't directly connected to the cloud. This means that a local mechanism needs to be established to collect and forward that data to ensure it is captured and processed correctly by Splunk Cloud. This setup allows for greater flexibility in managing data flows and enables the use of various data sources that operate on different network protocols, like UDP.

Other options do not align with the standard practices of getting UDP data into Splunk Cloud due to various limitations or misconceptions about data handling in the cloud environment.