https://community.splunk.com/t5/Getting-Data-In/i-can-t-seeing-Windows-Event-1102/m-p/478764#M82185 <P>Is the Windows 10 in a domain?</P> <P>Event 1102 is logged whenever the Security log is cleared, <BR /> REGARDLESS of the status of the Audit System Events audit policy. <BR /> Source: <A href="https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=1102">https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=1102</A></P> Tue, 05 Nov 2019 20:01:02 GMT Anonymous 2019-11-05T20:01:02Z https://community.splunk.com/t5/Getting-Data-In/i-can-t-seeing-Windows-Event-1102/m-p/478762#M82183 <P>In my Splunk Enterprise instance, i can't seeing the windows event "1102" from W10 client.</P> <P>Someone can me help ?</P> Tue, 05 Nov 2019 15:23:50 GMT https://community.splunk.com/t5/Getting-Data-In/i-can-t-seeing-Windows-Event-1102/m-p/478762#M82183 dariobuonocore9 2019-11-05T15:23:50Z https://community.splunk.com/t5/Getting-Data-In/i-can-t-seeing-Windows-Event-1102/m-p/478763#M82184 <P>Have you verified that the event is being generated on the W10 client?</P> Tue, 05 Nov 2019 18:49:16 GMT https://community.splunk.com/t5/Getting-Data-In/i-can-t-seeing-Windows-Event-1102/m-p/478763#M82184 mledford 2019-11-05T18:49:16Z https://community.splunk.com/t5/Getting-Data-In/i-can-t-seeing-Windows-Event-1102/m-p/478764#M82185 <P>Is the Windows 10 in a domain?</P> <P>Event 1102 is logged whenever the Security log is cleared, <BR /> REGARDLESS of the status of the Audit System Events audit policy. <BR /> Source: <A href="https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=1102">https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=1102</A></P> Tue, 05 Nov 2019 20:01:02 GMT https://community.splunk.com/t5/Getting-Data-In/i-can-t-seeing-Windows-Event-1102/m-p/478764#M82185 Anonymous 2019-11-05T20:01:02Z