https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-collect-Windows-event-logs-from-a-NAS-server/m-p/269271#M51692 <P>Dear guys,</P> <P>Is it possible to gather Windows event logs to indexer server by way of NAS Server which were transferred from any monitoring Windows server? This is under the condition of not deploying a Universal Forwarder on these monitoring PCs.</P> <P>Best regards,<BR /> y.niii</P> Thu, 10 Dec 2015 08:46:51 GMT yn03594042 2015-12-10T08:46:51Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-collect-Windows-event-logs-from-a-NAS-server/m-p/269271#M51692 <P>Dear guys,</P> <P>Is it possible to gather Windows event logs to indexer server by way of NAS Server which were transferred from any monitoring Windows server? This is under the condition of not deploying a Universal Forwarder on these monitoring PCs.</P> <P>Best regards,<BR /> y.niii</P> Thu, 10 Dec 2015 08:46:51 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-collect-Windows-event-logs-from-a-NAS-server/m-p/269271#M51692 yn03594042 2015-12-10T08:46:51Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-collect-Windows-event-logs-from-a-NAS-server/m-p/269272#M51693 <P>Not sure I understand, but if installing a forwarder is not an option, the usual approach is to have source systems send their event logs to a Windows event collection server and install the forwarder there.<BR /> Remember, event logs are binary and we need to properly format them before indexing into Splunk, which is what the executables do that ship with the Windows UF. <BR /> Take a look <A href="http://blogs.splunk.com/2014/02/03/forwarding-windows-event-logs-to-another-host/">here</A> for a description on how that works.</P> Thu, 10 Dec 2015 20:44:59 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-collect-Windows-event-logs-from-a-NAS-server/m-p/269272#M51693 s2_splunk 2015-12-10T20:44:59Z