https://community.splunk.com/t5/Getting-Data-In/Windows-Error-Logs-Only/m-p/46883#M96723 <P>Good-day, I am new and have searched for this, is there no way of setting this to pull error logs only from each windows log. </P> <P>Example Application Errors &amp; System Errors only</P> <P>And can this program pull these errors from 8-10 Servers on the same domain?</P> <P>Thanks Guys</P> Wed, 09 May 2012 11:06:41 GMT Srikesh 2012-05-09T11:06:41Z https://community.splunk.com/t5/Getting-Data-In/Windows-Error-Logs-Only/m-p/46883#M96723 <P>Good-day, I am new and have searched for this, is there no way of setting this to pull error logs only from each windows log. </P> <P>Example Application Errors &amp; System Errors only</P> <P>And can this program pull these errors from 8-10 Servers on the same domain?</P> <P>Thanks Guys</P> Wed, 09 May 2012 11:06:41 GMT https://community.splunk.com/t5/Getting-Data-In/Windows-Error-Logs-Only/m-p/46883#M96723 Srikesh 2012-05-09T11:06:41Z https://community.splunk.com/t5/Getting-Data-In/Windows-Error-Logs-Only/m-p/46884#M96724 <P>hi Srikesh</P> <P>you will not come around some reading; sit down and start <A href="http://docs.splunk.com/Documentation/Splunk/4.3.2/Data/MonitorWindowsdata">here</A> and some more <A href="http://docs.splunk.com/Documentation/Splunk/4.3.2/Troubleshooting/TroubleshootingWindowseventlogs">here</A>.</P> <P>Splunk can handle 8-10 Servers in the same domain without any problem, just remember the service running splunk must have domain admin permission to be able to use remote WMI.</P> <P>hope this helps, cheers</P> <P>MuS</P> Wed, 09 May 2012 11:28:29 GMT https://community.splunk.com/t5/Getting-Data-In/Windows-Error-Logs-Only/m-p/46884#M96724 MuS 2012-05-09T11:28:29Z https://community.splunk.com/t5/Getting-Data-In/Windows-Error-Logs-Only/m-p/46885#M96725 <P>Hi MuS, Thanks a million for that, helps alot... However I do not find info on how to filter only the error logs...</P> Wed, 09 May 2012 12:23:15 GMT https://community.splunk.com/t5/Getting-Data-In/Windows-Error-Logs-Only/m-p/46885#M96725 Srikesh 2012-05-09T12:23:15Z https://community.splunk.com/t5/Getting-Data-In/Windows-Error-Logs-Only/m-p/46886#M96726 <P>try this <A href="http://docs.splunk.com/Documentation/Splunk/4.3.2/Deploy/Routeandfilterdatad#Filter_WMI_events">http://docs.splunk.com/Documentation/Splunk/4.3.2/Deploy/Routeandfilterdatad#Filter_WMI_events</A></P> Wed, 09 May 2012 12:26:14 GMT https://community.splunk.com/t5/Getting-Data-In/Windows-Error-Logs-Only/m-p/46886#M96726 MuS 2012-05-09T12:26:14Z