https://community.splunk.com/t5/Getting-Data-In/Configuration-for-windows-event-logs/m-p/82699#M17148 <P>Looks right, except the last line - not sure what the idea is there. That shouldn't stop the input from working though. Judging by the conf, your error does not lie there but elsewhere.</P> Wed, 03 Apr 2013 06:51:36 GMT Ayn 2013-04-03T06:51:36Z https://community.splunk.com/t5/Getting-Data-In/Configuration-for-windows-event-logs/m-p/82698#M17147 <P>I want to monitor windows event logs and the below is the entries of inputs.conf file. But i am not able to view the data for this index. Can someone confirm if the format of entries is correct?</P> <P><U>inputs.conf</U><BR /><BR /> [default]<BR /><BR /> host = myhost</P> <P>[WinEventLog:Application]<BR /><BR /> disabled = 0<BR /><BR /> index = myindex<BR /><BR /> sourcetype = WinEventLog:Application<BR /><BR /> SourceName=myapplicationname</P> Wed, 03 Apr 2013 04:15:44 GMT https://community.splunk.com/t5/Getting-Data-In/Configuration-for-windows-event-logs/m-p/82698#M17147 p_basanth 2013-04-03T04:15:44Z https://community.splunk.com/t5/Getting-Data-In/Configuration-for-windows-event-logs/m-p/82699#M17148 <P>Looks right, except the last line - not sure what the idea is there. That shouldn't stop the input from working though. Judging by the conf, your error does not lie there but elsewhere.</P> Wed, 03 Apr 2013 06:51:36 GMT https://community.splunk.com/t5/Getting-Data-In/Configuration-for-windows-event-logs/m-p/82699#M17148 Ayn 2013-04-03T06:51:36Z