https://community.splunk.com/t5/Getting-Data-In/Custom-WinEvent-in-Splunk-Can-t-see-logs-in-Splunk/m-p/647579#M110118 <P>Hi</P><P>Have you already working connection from UF to splunk indexers (You are getting other logs from that node)?</P><P>r. Ismo</P> Tue, 20 Jun 2023 11:26:38 GMT isoutamo 2023-06-20T11:26:38Z https://community.splunk.com/t5/Getting-Data-In/Custom-WinEvent-in-Splunk-Can-t-see-logs-in-Splunk/m-p/647578#M110117 <P>Hi Team,</P> <P>I'm onboarding custom winevents to Splunk</P> <PRE>[WinEventLog://Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational disabled = 0<BR />index = wineventlog</PRE> <P>above is the stanza I'm using it but I'm not able to see logs in Splunk.</P> Tue, 20 Jun 2023 13:55:47 GMT https://community.splunk.com/t5/Getting-Data-In/Custom-WinEvent-in-Splunk-Can-t-see-logs-in-Splunk/m-p/647578#M110117 vikramauto 2023-06-20T13:55:47Z https://community.splunk.com/t5/Getting-Data-In/Custom-WinEvent-in-Splunk-Can-t-see-logs-in-Splunk/m-p/647579#M110118 <P>Hi</P><P>Have you already working connection from UF to splunk indexers (You are getting other logs from that node)?</P><P>r. Ismo</P> Tue, 20 Jun 2023 11:26:38 GMT https://community.splunk.com/t5/Getting-Data-In/Custom-WinEvent-in-Splunk-Can-t-see-logs-in-Splunk/m-p/647579#M110118 isoutamo 2023-06-20T11:26:38Z https://community.splunk.com/t5/Getting-Data-In/Custom-WinEvent-in-Splunk-Can-t-see-logs-in-Splunk/m-p/647601#M110124 <P>hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/214410">@isoutamo</a>&nbsp;Yes it is connected to indexer as I'm able to see application, security, and system logs from this machine</P> Tue, 20 Jun 2023 12:35:35 GMT https://community.splunk.com/t5/Getting-Data-In/Custom-WinEvent-in-Splunk-Can-t-see-logs-in-Splunk/m-p/647601#M110124 vikramauto 2023-06-20T12:35:35Z