https://community.splunk.com/t5/Getting-Data-In/Microsoft-web-application-proxy-log-format-inputs-conf/m-p/572671#M101338 <P>Did you ever figure out the [WinEventLog://Web Application Proxy/Admin] ? Wanting to splunk these logs&nbsp; as well.</P> Wed, 27 Oct 2021 15:01:57 GMT jvsplunker 2021-10-27T15:01:57Z https://community.splunk.com/t5/Getting-Data-In/Microsoft-web-application-proxy-log-format-inputs-conf/m-p/539533#M90384 <P>I'm trying to configure my forwarder on a Windows server to send the Web Application Proxy logs.&nbsp; I'm using this format but it doesn't seem to be sending.&nbsp; I also added ADFS and that worked.&nbsp; Syntax is as follows:</P><P>[WinEventLog://AD FS/Admin]</P><P>disabled = 0</P><P>[WinEventLog://Web Application Proxy/Admin]</P><P>Disabled = 0</P><P>I couldn't find a documented list for all of the different windows logs.&nbsp; Any help would be appreciated.&nbsp;</P> Thu, 11 Feb 2021 17:11:41 GMT https://community.splunk.com/t5/Getting-Data-In/Microsoft-web-application-proxy-log-format-inputs-conf/m-p/539533#M90384 tarricop 2021-02-11T17:11:41Z https://community.splunk.com/t5/Getting-Data-In/Microsoft-web-application-proxy-log-format-inputs-conf/m-p/572671#M101338 <P>Did you ever figure out the [WinEventLog://Web Application Proxy/Admin] ? Wanting to splunk these logs&nbsp; as well.</P> Wed, 27 Oct 2021 15:01:57 GMT https://community.splunk.com/t5/Getting-Data-In/Microsoft-web-application-proxy-log-format-inputs-conf/m-p/572671#M101338 jvsplunker 2021-10-27T15:01:57Z