topic Re: How to configure windows event (example login access) to send to splunk? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-to-configure-windows-event-example-login-access-to-send-to/m-p/185341#M37113 <P>Hi Stefano,</P> <P>you have various possibilities depending on your security requirements and network infrastructure : using a Windows local forwarder, WMI, ...<BR /> See <A href="http://docs.splunk.com/Documentation/Splunk/latest/Data/MonitorWindowsdata">http://docs.splunk.com/Documentation/Splunk/latest/Data/MonitorWindowsdata</A> <BR /> /dd</P> Fri, 16 Jan 2015 07:43:15 GMT ddessy_splunk 2015-01-16T07:43:15Z How to configure windows event (example login access) to send to splunk? https://community.splunk.com/t5/Getting-Data-In/How-to-configure-windows-event-example-login-access-to-send-to/m-p/185340#M37112 <P>Hi, <BR /> I'm using splunk recently.<BR /> How can I configure "windows events" (example login access) to send them to splunk? I need a Universal forwarder? On splunk, which configuration should I do?<BR /> thanks in advance<BR /> Stefano</P> Fri, 16 Jan 2015 07:09:07 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-configure-windows-event-example-login-access-to-send-to/m-p/185340#M37112 StefanoLodola 2015-01-16T07:09:07Z Re: How to configure windows event (example login access) to send to splunk? https://community.splunk.com/t5/Getting-Data-In/How-to-configure-windows-event-example-login-access-to-send-to/m-p/185341#M37113 <P>Hi Stefano,</P> <P>you have various possibilities depending on your security requirements and network infrastructure : using a Windows local forwarder, WMI, ...<BR /> See <A href="http://docs.splunk.com/Documentation/Splunk/latest/Data/MonitorWindowsdata">http://docs.splunk.com/Documentation/Splunk/latest/Data/MonitorWindowsdata</A> <BR /> /dd</P> Fri, 16 Jan 2015 07:43:15 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-configure-windows-event-example-login-access-to-send-to/m-p/185341#M37113 ddessy_splunk 2015-01-16T07:43:15Z Re: How to configure windows event (example login access) to send to splunk? https://community.splunk.com/t5/Getting-Data-In/How-to-configure-windows-event-example-login-access-to-send-to/m-p/185342#M37114 <P>I have configured the Universal Forwarder, but I any case the data that the server splunk collect from the server are too old. ??!!?<BR /> When I try to set the remote event log on splunk, I have always the same error "in handler 'win-wmi-enum-eventlogs' unable to get wmi classes from host"</P> <P>Can u help me?</P> Fri, 16 Jan 2015 11:02:14 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-configure-windows-event-example-login-access-to-send-to/m-p/185342#M37114 StefanoLodola 2015-01-16T11:02:14Z