topic Re: How to add Windows Services and Application logs in Splunk Cloud? in All Apps and Add-ons https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-add-Windows-Services-and-Application-logs-in-Splunk-Cloud/m-p/360357#M43553 <P>Close, but set disabled = 0.</P> Sat, 29 Apr 2017 16:30:29 GMT xavierashe 2017-04-29T16:30:29Z How to add Windows Services and Application logs in Splunk Cloud? https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-add-Windows-Services-and-Application-logs-in-Splunk-Cloud/m-p/360354#M43550 <P>How to watch Windows service and application logs like -Activedocs Opus?<BR /> Do we need to edit inputs.conf in Splunk Add-on for Microsoft Windows for that?<BR /> If yes, what are config changes?</P> Fri, 17 Mar 2017 19:57:00 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-add-Windows-Services-and-Application-logs-in-Splunk-Cloud/m-p/360354#M43550 shilpijain 2017-03-17T19:57:00Z Re: How to add Windows Services and Application logs in Splunk Cloud? https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-add-Windows-Services-and-Application-logs-in-Splunk-Cloud/m-p/360355#M43551 <P>Hi shilpijain,<BR /> Yes, edit the Windows TA to collect application logs: <BR /> [WinEventLog://Application]<BR /> disabled = 1<BR /> start_from = oldest<BR /> current_only = 0<BR /> checkpointInterval = 5<BR /> index = wineventlog<BR /> renderXml=false<BR /> depends on the case, you will sometimes need to enable some auditing on windows server</P> Tue, 29 Sep 2020 13:16:29 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-add-Windows-Services-and-Application-logs-in-Splunk-Cloud/m-p/360355#M43551 adonio 2020-09-29T13:16:29Z Re: How to add Windows Services and Application logs in Splunk Cloud? https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-add-Windows-Services-and-Application-logs-in-Splunk-Cloud/m-p/360356#M43552 <P>Are you using a deployment server?</P> Sat, 29 Apr 2017 16:29:44 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-add-Windows-Services-and-Application-logs-in-Splunk-Cloud/m-p/360356#M43552 xavierashe 2017-04-29T16:29:44Z Re: How to add Windows Services and Application logs in Splunk Cloud? https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-add-Windows-Services-and-Application-logs-in-Splunk-Cloud/m-p/360357#M43553 <P>Close, but set disabled = 0.</P> Sat, 29 Apr 2017 16:30:29 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-add-Windows-Services-and-Application-logs-in-Splunk-Cloud/m-p/360357#M43553 xavierashe 2017-04-29T16:30:29Z Re: How to add Windows Services and Application logs in Splunk Cloud? https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-add-Windows-Services-and-Application-logs-in-Splunk-Cloud/m-p/360358#M43554 <P>This is the code you need in your inputs.conf for applications logs.</P> <PRE><CODE>[WinEventLog://Application] disabled = 0 start_from = oldest current_only = 0 checkpointInterval = 5 index = wineventlog renderXml=false </CODE></PRE> Sat, 29 Apr 2017 17:20:59 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-add-Windows-Services-and-Application-logs-in-Splunk-Cloud/m-p/360358#M43554 xavierashe 2017-04-29T17:20:59Z