<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Generate test logs in Windows in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Generate-test-logs-in-Windows/m-p/76949#M15732</link>
    <description>&lt;P&gt;I'm trying to test some things with my Splunk Windows installs and I'd like to have reliable test data.  When I test *nix logs with Splunk I tend to use 'logger' to create the messages.  I've been unable to find an equivalent for Windows (preferably 7).  Does something like that exist? or is there a technique to force Windows to send logs (without having to actually do the action that makes the log?)&lt;/P&gt;</description>
    <pubDate>Mon, 25 Oct 2010 22:50:37 GMT</pubDate>
    <dc:creator>thepocketwade</dc:creator>
    <dc:date>2010-10-25T22:50:37Z</dc:date>
    <item>
      <title>Generate test logs in Windows</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Generate-test-logs-in-Windows/m-p/76949#M15732</link>
      <description>&lt;P&gt;I'm trying to test some things with my Splunk Windows installs and I'd like to have reliable test data.  When I test *nix logs with Splunk I tend to use 'logger' to create the messages.  I've been unable to find an equivalent for Windows (preferably 7).  Does something like that exist? or is there a technique to force Windows to send logs (without having to actually do the action that makes the log?)&lt;/P&gt;</description>
      <pubDate>Mon, 25 Oct 2010 22:50:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Generate-test-logs-in-Windows/m-p/76949#M15732</guid>
      <dc:creator>thepocketwade</dc:creator>
      <dc:date>2010-10-25T22:50:37Z</dc:date>
    </item>
    <item>
      <title>Re: Generate test logs in Windows</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Generate-test-logs-in-Windows/m-p/76950#M15733</link>
      <description>&lt;P&gt;well, you could just eat your event logs, no?&lt;BR /&gt;
On your &lt;CODE&gt;Manager » Data inputs&lt;/CODE&gt; , get WMI events and system logging to come in, youll see plenty of goodies for you to test on.&lt;/P&gt;</description>
      <pubDate>Mon, 25 Oct 2010 23:44:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Generate-test-logs-in-Windows/m-p/76950#M15733</guid>
      <dc:creator>Genti</dc:creator>
      <dc:date>2010-10-25T23:44:54Z</dc:date>
    </item>
    <item>
      <title>Re: Generate test logs in Windows</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Generate-test-logs-in-Windows/m-p/76951#M15734</link>
      <description>&lt;P&gt;I could, and in fact I already am.  What I'm looking for is a way to generate logs with any EventCode for testing purposes.  That way, I can know for certain that EventCode = 1901 was sent, and can then verify that it was indexed (or not) properly.&lt;/P&gt;</description>
      <pubDate>Tue, 26 Oct 2010 00:42:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Generate-test-logs-in-Windows/m-p/76951#M15734</guid>
      <dc:creator>thepocketwade</dc:creator>
      <dc:date>2010-10-26T00:42:17Z</dc:date>
    </item>
    <item>
      <title>Re: Generate test logs in Windows</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Generate-test-logs-in-Windows/m-p/76952#M15735</link>
      <description>&lt;P&gt;Eventcreate sounds like what you might be looking for:&lt;/P&gt;

&lt;P&gt;&lt;A href="http://technet.microsoft.com/en-us/library/bb490899.aspx" rel="nofollow"&gt;More on eventcreate&lt;/A&gt; - yes, it's the XP docs, but it 100% works in 2003.&lt;/P&gt;</description>
      <pubDate>Thu, 13 Jan 2011 06:35:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Generate-test-logs-in-Windows/m-p/76952#M15735</guid>
      <dc:creator>malmoore</dc:creator>
      <dc:date>2011-01-13T06:35:05Z</dc:date>
    </item>
  </channel>
</rss>

