https://community.splunk.com/t5/Getting-Data-In/SMB-server-logs-not-coming-in-into-splunk/m-p/574234#M101525 <P>Hi All,</P><P>We have configures below stanza on SMB server(UF) and splunk forwarder to collect SMB logs,</P><P>[WinEventLog://Microsoft-Windows-SMBServer/Audit]<BR />disabled = 0<BR />start_from = oldest<BR />current_only = 0<BR />index = wineventlog</P><P>Can you please let us know if the above stanza worked for anyone to collect the logs or&nbsp; share any working stanza is appreciated.</P><P>TIA</P><P>Sharada</P> Tue, 09 Nov 2021 16:17:20 GMT sharada 2021-11-09T16:17:20Z https://community.splunk.com/t5/Getting-Data-In/SMB-server-logs-not-coming-in-into-splunk/m-p/574234#M101525 <P>Hi All,</P><P>We have configures below stanza on SMB server(UF) and splunk forwarder to collect SMB logs,</P><P>[WinEventLog://Microsoft-Windows-SMBServer/Audit]<BR />disabled = 0<BR />start_from = oldest<BR />current_only = 0<BR />index = wineventlog</P><P>Can you please let us know if the above stanza worked for anyone to collect the logs or&nbsp; share any working stanza is appreciated.</P><P>TIA</P><P>Sharada</P> Tue, 09 Nov 2021 16:17:20 GMT https://community.splunk.com/t5/Getting-Data-In/SMB-server-logs-not-coming-in-into-splunk/m-p/574234#M101525 sharada 2021-11-09T16:17:20Z