topic How can I view scan logs from Windows Defender? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-can-I-view-scan-logs-from-Windows-Defender/m-p/290791#M55436 <P>Hi,</P> <P>I have installed the SplunkUniversalForwarder and ave sucessfully got data into Splunk. However, i want to view the scan logs from Windows Defender, how should i search it on the search head?</P> <P>Thanks in advance!</P> Mon, 09 Oct 2017 02:19:09 GMT 5plunked 2017-10-09T02:19:09Z How can I view scan logs from Windows Defender? https://community.splunk.com/t5/Getting-Data-In/How-can-I-view-scan-logs-from-Windows-Defender/m-p/290791#M55436 <P>Hi,</P> <P>I have installed the SplunkUniversalForwarder and ave sucessfully got data into Splunk. However, i want to view the scan logs from Windows Defender, how should i search it on the search head?</P> <P>Thanks in advance!</P> Mon, 09 Oct 2017 02:19:09 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-view-scan-logs-from-Windows-Defender/m-p/290791#M55436 5plunked 2017-10-09T02:19:09Z Re: How can I view scan logs from Windows Defender? https://community.splunk.com/t5/Getting-Data-In/How-can-I-view-scan-logs-from-Windows-Defender/m-p/290792#M55437 <P>Would your TA work for this, @pdoconnell?</P> Mon, 09 Oct 2017 22:28:18 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-view-scan-logs-from-Windows-Defender/m-p/290792#M55437 lfedak_splunk 2017-10-09T22:28:18Z Re: How can I view scan logs from Windows Defender? https://community.splunk.com/t5/Getting-Data-In/How-can-I-view-scan-logs-from-Windows-Defender/m-p/290793#M55438 <P>Yup, this looks like me. I'm currently getting my TA certified, but if you want to look into it @5splunked, you can at <A href="https://github.com/pdoconnell/TA-microsoft-windefender">https://github.com/pdoconnell/TA-microsoft-windefender</A></P> Mon, 09 Oct 2017 22:39:50 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-view-scan-logs-from-Windows-Defender/m-p/290793#M55438 pdoconnell 2017-10-09T22:39:50Z Re: How can I view scan logs from Windows Defender? https://community.splunk.com/t5/Getting-Data-In/How-can-I-view-scan-logs-from-Windows-Defender/m-p/290794#M55439 <P>Said this above, but look at <A href="https://github.com/pdoconnell/TA-microsoft-windefender">https://github.com/pdoconnell/TA-microsoft-windefender</A> for now. When this ends up on SplunkBase, I'll link there.</P> Mon, 09 Oct 2017 22:40:43 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-view-scan-logs-from-Windows-Defender/m-p/290794#M55439 pdoconnell 2017-10-09T22:40:43Z