https://community.splunk.com/t5/Getting-Data-In/How-can-I-write-a-wineventlog-input-for-this-hypenated-root/m-p/564381#M100497 <P>Usually splunk seems to interpret hypens for event viewer as folders.&nbsp; I have this input but its not working.</P><LI-CODE lang="markup">[WinEventLog://Microsoft-ServerManagementExperience disabled = 0 index = wineventlog</LI-CODE><P>Here is a screenshot of the folder i'd like to monitor with Splunk.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="EventViewer.PNG" style="width: 305px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/15677iFA051835FD114CF4/image-size/large?v=v2&amp;px=999" role="button" title="EventViewer.PNG" alt="EventViewer.PNG" /></span></P> Mon, 23 Aug 2021 15:35:27 GMT splunk219783 2021-08-23T15:35:27Z https://community.splunk.com/t5/Getting-Data-In/How-can-I-write-a-wineventlog-input-for-this-hypenated-root/m-p/564381#M100497 <P>Usually splunk seems to interpret hypens for event viewer as folders.&nbsp; I have this input but its not working.</P><LI-CODE lang="markup">[WinEventLog://Microsoft-ServerManagementExperience disabled = 0 index = wineventlog</LI-CODE><P>Here is a screenshot of the folder i'd like to monitor with Splunk.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="EventViewer.PNG" style="width: 305px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/15677iFA051835FD114CF4/image-size/large?v=v2&amp;px=999" role="button" title="EventViewer.PNG" alt="EventViewer.PNG" /></span></P> Mon, 23 Aug 2021 15:35:27 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-write-a-wineventlog-input-for-this-hypenated-root/m-p/564381#M100497 splunk219783 2021-08-23T15:35:27Z