https://community.splunk.com/t5/Getting-Data-In/Splunk-universal-forwarders/m-p/92956#M19336 <P>Please read this and it will give you the details for how to monitor windows events.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitorwindowsdata">http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitorwindowsdata</A></P> Sat, 19 Jan 2013 18:36:34 GMT sdaniels 2013-01-19T18:36:34Z https://community.splunk.com/t5/Getting-Data-In/Splunk-universal-forwarders/m-p/92955#M19335 <P>Where does Splunk universal forwarder actually get the data?<BR /> How do it organizes the data and send to Splunk indexer?<BR /> Kindly please help along with the file names.</P> <P>OS: Windows</P> Sat, 19 Jan 2013 13:11:35 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-universal-forwarders/m-p/92955#M19335 chimbudp 2013-01-19T13:11:35Z https://community.splunk.com/t5/Getting-Data-In/Splunk-universal-forwarders/m-p/92956#M19336 <P>Please read this and it will give you the details for how to monitor windows events.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitorwindowsdata">http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitorwindowsdata</A></P> Sat, 19 Jan 2013 18:36:34 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-universal-forwarders/m-p/92956#M19336 sdaniels 2013-01-19T18:36:34Z