topic Re: Eventtype 'wineventlog_security' does not exist or is disabled. in All Apps and Add-ons https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/461156#M74096 <P>I take it you have installed the windows TA on your searchhead?<BR /> I am guessing so, because you said that the event types are set to global.</P> <P>Is there any chance you have changed the permissions on the installed TA from apps settings.<BR /> I have a funny feeling that if you set an event type to global, but in an app that does not give everyone read access you can get these errors.</P> Tue, 04 Feb 2020 11:23:58 GMT nickhills 2020-02-04T11:23:58Z Eventtype 'wineventlog_security' does not exist or is disabled. https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/461153#M74093 <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/8321iBB38061B725F512B/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span>Hi,</P> <P>I am getting a warning after running any search job "Eventtype 'wineventlog_security' does not exist or is disabled." There is a post regarding this (<A href="https://answers.splunk.com/answers/744214/eventtype-wineventlog-security-does-not-exist-or-i.html">https://answers.splunk.com/answers/744214/eventtype-wineventlog-security-does-not-exist-or-i.html</A>) and it mentioned there to check that this eventtype is shared globally, and they are globally shared.</P> <P>Would anyone know where else I should check? I am on version 8.0.0.</P> <P>Thanks and regards</P> Tue, 04 Feb 2020 10:56:31 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/461153#M74093 africates 2020-02-04T10:56:31Z Re: Eventtype 'wineventlog_security' does not exist or is disabled. https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/461154#M74094 <P>Can you post the actual error you are seeing? Perhaps a screen shot?</P> Tue, 04 Feb 2020 11:02:44 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/461154#M74094 nickhills 2020-02-04T11:02:44Z Re: Eventtype 'wineventlog_security' does not exist or is disabled. https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/461155#M74095 <P>sorry, i thought i have uploaded the image. see updated post. thanks</P> Tue, 04 Feb 2020 11:15:06 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/461155#M74095 africates 2020-02-04T11:15:06Z Re: Eventtype 'wineventlog_security' does not exist or is disabled. https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/461156#M74096 <P>I take it you have installed the windows TA on your searchhead?<BR /> I am guessing so, because you said that the event types are set to global.</P> <P>Is there any chance you have changed the permissions on the installed TA from apps settings.<BR /> I have a funny feeling that if you set an event type to global, but in an app that does not give everyone read access you can get these errors.</P> Tue, 04 Feb 2020 11:23:58 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/461156#M74096 nickhills 2020-02-04T11:23:58Z Re: Eventtype 'wineventlog_security' does not exist or is disabled. https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/461157#M74097 <P>hmm, thinking about this, I'm doubting my comment. <BR /> I'm not near a deployment to check this at the moment..</P> Tue, 04 Feb 2020 11:25:21 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/461157#M74097 nickhills 2020-02-04T11:25:21Z Re: Eventtype 'wineventlog_security' does not exist or is disabled. https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/461158#M74098 <P>Hi nick, I have windows TA installed on the forwarders, but not in the server itself.</P> Wed, 05 Feb 2020 11:19:25 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/461158#M74098 africates 2020-02-05T11:19:25Z Re: Eventtype 'wineventlog_security' does not exist or is disabled. https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/461159#M74099 <P>Oh! You probably want on your indexers and definitely on your search heads.</P> <P>("probably" depends on your exact deployment) See:<BR /> <A href="https://docs.splunk.com/Documentation/WindowsAddOn/7.0.0/User/Install">https://docs.splunk.com/Documentation/WindowsAddOn/7.0.0/User/Install</A></P> Wed, 05 Feb 2020 11:23:49 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/461159#M74099 nickhills 2020-02-05T11:23:49Z Re: Eventtype 'wineventlog_security' does not exist or is disabled. https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/560760#M74100 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/3808">@africates</a>&nbsp;- I have the same issue, did you find the solution ?</P> Mon, 26 Jul 2021 11:11:50 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Eventtype-wineventlog-security-does-not-exist-or-is-disabled/m-p/560760#M74100 spodda01da 2021-07-26T11:11:50Z