is there free edition of Splunk to use?Did you try to actually put something in the "Source Address" in the target config ?
So in stead of 0.0.0.0 put 192.168.7.254 or whatever the IP on the MT side.
thank you ! Yes, I did
I'm using Netflow to (towards Splunk) and this just works.