topic sysmon event didnt sent to splunk SH in Getting Data In https://community.splunk.com/t5/Getting-Data-In/sysmon-event-didnt-sent-to-splunk-SH/m-p/658372#M111367 <P>Hello i already installed UF in Windows Server 2016 but I get the error in Splunkd</P><LI-CODE lang="markup">09-22-2023 10:19:01.204 +0700 ERROR ExecProcessor [4720 ExecProcessor] - message from ""C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe"" splunk-winevtlog - WinEventLogChannel::init: Failed to bind to DC, dc_bind_time=0 msec 09-22-2023 10:19:01.204 +0700 ERROR ExecProcessor [4720 ExecProcessor] - message from ""C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe"" splunk-winevtlog - WinEventLogChannel::subscribeToEvtChannel: Could not subscribe to Windows Event Log channel 'Microsoft-Windows-Sysmon/Operational' 09-22-2023 10:19:01.204 +0700 ERROR ExecProcessor [4720 ExecProcessor] - message from ""C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe"" splunk-winevtlog - WinEventLogChannel::init: Init failed, unable to subscribe to Windows Event Log channel 'Microsoft-Windows-Sysmon/Operational': errorCode=5</LI-CODE><P>can anyone help me regarding this issue?</P><P>&nbsp;</P> Fri, 22 Sep 2023 05:28:35 GMT arsidiq 2023-09-22T05:28:35Z sysmon event didnt sent to splunk SH https://community.splunk.com/t5/Getting-Data-In/sysmon-event-didnt-sent-to-splunk-SH/m-p/658372#M111367 <P>Hello i already installed UF in Windows Server 2016 but I get the error in Splunkd</P><LI-CODE lang="markup">09-22-2023 10:19:01.204 +0700 ERROR ExecProcessor [4720 ExecProcessor] - message from ""C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe"" splunk-winevtlog - WinEventLogChannel::init: Failed to bind to DC, dc_bind_time=0 msec 09-22-2023 10:19:01.204 +0700 ERROR ExecProcessor [4720 ExecProcessor] - message from ""C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe"" splunk-winevtlog - WinEventLogChannel::subscribeToEvtChannel: Could not subscribe to Windows Event Log channel 'Microsoft-Windows-Sysmon/Operational' 09-22-2023 10:19:01.204 +0700 ERROR ExecProcessor [4720 ExecProcessor] - message from ""C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe"" splunk-winevtlog - WinEventLogChannel::init: Init failed, unable to subscribe to Windows Event Log channel 'Microsoft-Windows-Sysmon/Operational': errorCode=5</LI-CODE><P>can anyone help me regarding this issue?</P><P>&nbsp;</P> Fri, 22 Sep 2023 05:28:35 GMT https://community.splunk.com/t5/Getting-Data-In/sysmon-event-didnt-sent-to-splunk-SH/m-p/658372#M111367 arsidiq 2023-09-22T05:28:35Z