https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-Environment-Variable-Windows/m-p/487630#M83477 <P>I'm trying to ingest logs from client computers that are written to localappdata of the user running the software. The logs are not being picked up and I presume this is because splunk forwarder is not in the user context. </P> Mon, 27 Apr 2020 15:26:56 GMT ntripp_element 2020-04-27T15:26:56Z https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-Environment-Variable-Windows/m-p/487630#M83477 <P>I'm trying to ingest logs from client computers that are written to localappdata of the user running the software. The logs are not being picked up and I presume this is because splunk forwarder is not in the user context. </P> Mon, 27 Apr 2020 15:26:56 GMT https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-Environment-Variable-Windows/m-p/487630#M83477 ntripp_element 2020-04-27T15:26:56Z https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-Environment-Variable-Windows/m-p/487631#M83478 <P>Please share the inputs.conf settings for the UF.</P> Mon, 27 Apr 2020 15:54:53 GMT https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-Environment-Variable-Windows/m-p/487631#M83478 richgalloway 2020-04-27T15:54:53Z