https://community.splunk.com/t5/Getting-Data-In/Windows-events-log-monitoring/m-p/173729#M34955 <P>You can configure this when you install the forwarder on the remote machine. There is a setting GUI during the install that allows you to select which event logs to monitor.</P> <P>Settings for monitoring the event logs can be found in on the forwarder in the splunk\etc\apps*\local\inputs.conf files. Some will be turned on, and others will be turned off. You can turn them on or off by changing the "disabled" parameter value to 1 (off) or 0 (on). If you make changes to inputs.conf you will need to restart the splunkd service on the forwarder for the changes to take affect.</P> Wed, 21 May 2014 13:47:48 GMT lukejadamec 2014-05-21T13:47:48Z https://community.splunk.com/t5/Getting-Data-In/Windows-events-log-monitoring/m-p/173728#M34954 <P>I need to monitor the windows event logs using the universal forwarder. Please help me out for the below queries:-</P> <OL> <LI>How to configure the inputs for remote machine.</LI> <LI>If i want to monitor only application events logs, how to filter the application event log for a particular application event logs.</LI> </OL> <P>Thanks in advance. <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Wed, 21 May 2014 13:06:17 GMT https://community.splunk.com/t5/Getting-Data-In/Windows-events-log-monitoring/m-p/173728#M34954 RashmiGowda 2014-05-21T13:06:17Z https://community.splunk.com/t5/Getting-Data-In/Windows-events-log-monitoring/m-p/173729#M34955 <P>You can configure this when you install the forwarder on the remote machine. There is a setting GUI during the install that allows you to select which event logs to monitor.</P> <P>Settings for monitoring the event logs can be found in on the forwarder in the splunk\etc\apps*\local\inputs.conf files. Some will be turned on, and others will be turned off. You can turn them on or off by changing the "disabled" parameter value to 1 (off) or 0 (on). If you make changes to inputs.conf you will need to restart the splunkd service on the forwarder for the changes to take affect.</P> Wed, 21 May 2014 13:47:48 GMT https://community.splunk.com/t5/Getting-Data-In/Windows-events-log-monitoring/m-p/173729#M34955 lukejadamec 2014-05-21T13:47:48Z