https://community.splunk.com/t5/Security/Splunk-failed-to-fetch-the-element-from-the-server-error/m-p/18604#M13673 <P>Whenever I attempt to add a remote event log collection I am given this error:<BR /> "Splunk failed to fetch the element from the server: error"<BR /> Any ideas on what might be causing this?</P> <P>Thanks</P> Thu, 26 Jul 2012 19:14:11 GMT jonm1010 2012-07-26T19:14:11Z https://community.splunk.com/t5/Security/Splunk-failed-to-fetch-the-element-from-the-server-error/m-p/18604#M13673 <P>Whenever I attempt to add a remote event log collection I am given this error:<BR /> "Splunk failed to fetch the element from the server: error"<BR /> Any ideas on what might be causing this?</P> <P>Thanks</P> Thu, 26 Jul 2012 19:14:11 GMT https://community.splunk.com/t5/Security/Splunk-failed-to-fetch-the-element-from-the-server-error/m-p/18604#M13673 jonm1010 2012-07-26T19:14:11Z https://community.splunk.com/t5/Security/Splunk-failed-to-fetch-the-element-from-the-server-error/m-p/18605#M13674 <P>Take a look at this link below. It may give you the details to track this down since the error message has changed from when the below was answered.</P> <P><A href="http://splunk-base.splunk.com/answers/495/while-setting-up-a-windows-eventlog-collection-input-why-do-i-get-an-http-500-access-is-denied-error">http://splunk-base.splunk.com/answers/495/while-setting-up-a-windows-eventlog-collection-input-why-do-i-get-an-http-500-access-is-denied-error</A></P> Thu, 26 Jul 2012 19:19:37 GMT https://community.splunk.com/t5/Security/Splunk-failed-to-fetch-the-element-from-the-server-error/m-p/18605#M13674 sdaniels 2012-07-26T19:19:37Z https://community.splunk.com/t5/Security/Splunk-failed-to-fetch-the-element-from-the-server-error/m-p/18606#M13675 <P>Does splunk need to be installed on each machine I want to capture the logs from?</P> Thu, 26 Jul 2012 19:43:58 GMT https://community.splunk.com/t5/Security/Splunk-failed-to-fetch-the-element-from-the-server-error/m-p/18606#M13675 jonm1010 2012-07-26T19:43:58Z https://community.splunk.com/t5/Security/Splunk-failed-to-fetch-the-element-from-the-server-error/m-p/18607#M13676 <P>You would have a forwarder installed on each server or pull it remotely via WMI.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/Data/Windowseventlogsremote">http://docs.splunk.com/Documentation/Splunk/latest/Data/Windowseventlogsremote</A></P> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/Data/Windowseventlogslocal">http://docs.splunk.com/Documentation/Splunk/latest/Data/Windowseventlogslocal</A></P> Thu, 26 Jul 2012 19:46:42 GMT https://community.splunk.com/t5/Security/Splunk-failed-to-fetch-the-element-from-the-server-error/m-p/18607#M13676 sdaniels 2012-07-26T19:46:42Z