https://community.splunk.com/t5/Getting-Data-In/Why-are-some-Windows-Security-events-not-logging-in-Splunk/m-p/359197#M65547 <P>Hi Jordan54<BR /> You have to find in your inputs.conf of Splunk_TA_Windows if there are some blacklist or whitelist.<BR /> after, identify which events are in Event Viewer and not in Splunk and check which stanza shopuld take them (maybe is disabled).<BR /> Bye.<BR /> Giuseppe</P> Tue, 29 Sep 2020 15:57:24 GMT gcusello 2020-09-29T15:57:24Z https://community.splunk.com/t5/Getting-Data-In/Why-are-some-Windows-Security-events-not-logging-in-Splunk/m-p/359196#M65546 <P>I have a UF setup on a windows 2012 server. I am logging Win sec logs but I see some in the event viewer that are not going into splunk.. How can I get all the logs to go into Splunk from the windows server?</P> Tue, 26 Sep 2017 14:20:53 GMT https://community.splunk.com/t5/Getting-Data-In/Why-are-some-Windows-Security-events-not-logging-in-Splunk/m-p/359196#M65546 Jordan54 2017-09-26T14:20:53Z https://community.splunk.com/t5/Getting-Data-In/Why-are-some-Windows-Security-events-not-logging-in-Splunk/m-p/359197#M65547 <P>Hi Jordan54<BR /> You have to find in your inputs.conf of Splunk_TA_Windows if there are some blacklist or whitelist.<BR /> after, identify which events are in Event Viewer and not in Splunk and check which stanza shopuld take them (maybe is disabled).<BR /> Bye.<BR /> Giuseppe</P> Tue, 29 Sep 2020 15:57:24 GMT https://community.splunk.com/t5/Getting-Data-In/Why-are-some-Windows-Security-events-not-logging-in-Splunk/m-p/359197#M65547 gcusello 2020-09-29T15:57:24Z