Couple of links:https://cribl.io/blog/enabling-tls-on-a-cribl-leader-node-step-by-step-guide/https://docs.cribl.io/stream/securing-and-monitoring/

for the UF->CC scenario, you likely will only need to enable TLS in the UF config. no further steps required as CC is already TLS-enabled

https://cribl.io/blog/logstream-cloud-how-to-sending-data-to-logstream-from-various-agents/

```[tcpout]disabled = falsedefaultGroup = criblcloud[tcpout:criblcloud]server = in.<instance>.cribl.cloud:9997sslRootCAPath = $SPLUNK_HOME/etc/auth/cacert.pemuseSSL = truesendCookedData = truetoken = <optional-but-recommended>```