https://community.splunk.com/t5/Getting-Data-In/EventCode-4725-and-4726-not-visible-on-search-results/m-p/387676#M95657 <P>Are you logging these Event Codes?<BR /> Search for "index=* EventCode=4725". Are there any results?</P> Thu, 14 Feb 2019 07:31:39 GMT whrg 2019-02-14T07:31:39Z https://community.splunk.com/t5/Getting-Data-In/EventCode-4725-and-4726-not-visible-on-search-results/m-p/387675#M95656 <P>Hello, <BR /> We have Splunk Add-on for Microsoft Windows (Splunk_TA_windows) deployed in our environment. There are 2 lookup tables which have information about the event codes in the add-on:</P> <P>Name: xmlsecurity_eventcode_action_lookup<BR /><BR /> Supported Fields: EventCode,action,Category,Subcategory,message,os<BR /><BR /> Lookup File: xmlsecurity_eventcode_action.csv<BR /><BR /> App: Splunk_TA_windows<BR /> Status: Enabled <BR /> Name: xmlsecurity_eventcode_action_lookup_multiinput<BR /><BR /> Supported Fields: EventCode,action,Error_Code,Description<BR /><BR /> Lookup File:xmlsecurity_eventcode_action_multiinput.csv<BR /> App: Splunk_TA_windows<BR /> Status: Enabled </P> <P>When I checked the input lookup tables xmlsecurity_eventcode_action.csv &amp; xmlsecurity_eventcode_action_multiinput.csv the event codes 4725 and 4726 are present.<BR /> However I was not able to see the event code related logs.<BR /> Appreciate help.</P> <P>Thanks,<BR /> Krish</P> Tue, 29 Sep 2020 23:16:45 GMT https://community.splunk.com/t5/Getting-Data-In/EventCode-4725-and-4726-not-visible-on-search-results/m-p/387675#M95656 krishscalar 2020-09-29T23:16:45Z https://community.splunk.com/t5/Getting-Data-In/EventCode-4725-and-4726-not-visible-on-search-results/m-p/387676#M95657 <P>Are you logging these Event Codes?<BR /> Search for "index=* EventCode=4725". Are there any results?</P> Thu, 14 Feb 2019 07:31:39 GMT https://community.splunk.com/t5/Getting-Data-In/EventCode-4725-and-4726-not-visible-on-search-results/m-p/387676#M95657 whrg 2019-02-14T07:31:39Z