https://community.splunk.com/t5/Getting-Data-In/How-can-I-collect-eventlogs-into-my-Splunk/m-p/44301#M8264 <P>I have configured remote WMI in my Splunk to see the eventlogs on Windows servers. But when I index and search the eventlogs on remote servers, I found the CPU load of the remote server would reached to a peak in a short time. How can I do to aviod this situation, and whether there are some other ways to collect eventlogs on remote servers more efficient?</P> Mon, 06 Sep 2010 14:19:41 GMT ford1863 2010-09-06T14:19:41Z https://community.splunk.com/t5/Getting-Data-In/How-can-I-collect-eventlogs-into-my-Splunk/m-p/44301#M8264 <P>I have configured remote WMI in my Splunk to see the eventlogs on Windows servers. But when I index and search the eventlogs on remote servers, I found the CPU load of the remote server would reached to a peak in a short time. How can I do to aviod this situation, and whether there are some other ways to collect eventlogs on remote servers more efficient?</P> Mon, 06 Sep 2010 14:19:41 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-collect-eventlogs-into-my-Splunk/m-p/44301#M8264 ford1863 2010-09-06T14:19:41Z https://community.splunk.com/t5/Getting-Data-In/How-can-I-collect-eventlogs-into-my-Splunk/m-p/44302#M8265 <P>There are multiple ways of collecting windows event logs.</P> <P>This page may help you out:</P> <UL> <LI><A href="http://www.splunk.com/base/Documentation/latest/Admin/ConsiderationsfordecidinghowtomonitorWindowsdata" rel="nofollow">Considerations for deciding how to get data from Windows hosts</A></LI> </UL> Tue, 07 Sep 2010 20:14:25 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-collect-eventlogs-into-my-Splunk/m-p/44302#M8265 Lowell 2010-09-07T20:14:25Z