https://community.splunk.com/t5/Getting-Data-In/How-do-I-monitor-Desired-State-Config-event-logs/m-p/235286#M45816 <P>I'm trying to monitor the Desired State Configuration event logs on some Windows servers. I cannot seem to get the monitor stanza to work. Here's the current stanza:</P> <P>[WinEventLog://Microsoft-Windows-Desired State Configuration/Operational]</P> <P>I've also tried removing the spaces in 'Desired State Configuration' with no luck.</P> <P>Anyone successfully monitor these events? Any help would be greatly appreciated.<BR /> Thanks.</P> Thu, 06 Oct 2016 12:01:24 GMT ericlarsen 2016-10-06T12:01:24Z https://community.splunk.com/t5/Getting-Data-In/How-do-I-monitor-Desired-State-Config-event-logs/m-p/235286#M45816 <P>I'm trying to monitor the Desired State Configuration event logs on some Windows servers. I cannot seem to get the monitor stanza to work. Here's the current stanza:</P> <P>[WinEventLog://Microsoft-Windows-Desired State Configuration/Operational]</P> <P>I've also tried removing the spaces in 'Desired State Configuration' with no luck.</P> <P>Anyone successfully monitor these events? Any help would be greatly appreciated.<BR /> Thanks.</P> Thu, 06 Oct 2016 12:01:24 GMT https://community.splunk.com/t5/Getting-Data-In/How-do-I-monitor-Desired-State-Config-event-logs/m-p/235286#M45816 ericlarsen 2016-10-06T12:01:24Z https://community.splunk.com/t5/Getting-Data-In/How-do-I-monitor-Desired-State-Config-event-logs/m-p/235287#M45817 <P>For those curious, I got it working with this config:</P> <P>[WinEventLog://Microsoft-Windows-DSC/Operational]</P> Fri, 07 Oct 2016 15:05:45 GMT https://community.splunk.com/t5/Getting-Data-In/How-do-I-monitor-Desired-State-Config-event-logs/m-p/235287#M45817 ericlarsen 2016-10-07T15:05:45Z