topic ERROR ExecProcessor - message from &quot;C:\SplunkUniversalForwarder\bin\splunk-winevtlog.exe&quot; WinRegistryApi - RegKey::open - RegOpenKeyExW returned error 2: The system cannot find the file specified. in Getting Data In https://community.splunk.com/t5/Getting-Data-In/ERROR-ExecProcessor-message-from-quot-C-SplunkUniversalForwarder/m-p/149294#M97935 Thu, 11 Dec 2014 11:19:23 GMT dmhlakaza 2014-12-11T11:19:23Z ERROR ExecProcessor - message from "C:\SplunkUniversalForwarder\bin\splunk-winevtlog.exe" WinRegistryApi - RegKey::open - RegOpenKeyExW returned error 2: The system cannot find the file specified. https://community.splunk.com/t5/Getting-Data-In/ERROR-ExecProcessor-message-from-quot-C-SplunkUniversalForwarder/m-p/149294#M97935 Thu, 11 Dec 2014 11:19:23 GMT https://community.splunk.com/t5/Getting-Data-In/ERROR-ExecProcessor-message-from-quot-C-SplunkUniversalForwarder/m-p/149294#M97935 dmhlakaza 2014-12-11T11:19:23Z Re: ERROR ExecProcessor - message from "C:\SplunkUniversalForwarder\bin\splunk-winevtlog.exe" WinRegistryApi - RegKey::open - RegOpenKeyExW returned error 2: The system cannot find the file specified. https://community.splunk.com/t5/Getting-Data-In/ERROR-ExecProcessor-message-from-quot-C-SplunkUniversalForwarder/m-p/149295#M97936 <P>In the Windows event stanza make sure it's <BR /> [WinEventLog:Application]<BR /> NOT<BR /> [WinEventLog://Application]<BR /> this fixed it for me</P> Thu, 08 Jan 2015 18:59:33 GMT https://community.splunk.com/t5/Getting-Data-In/ERROR-ExecProcessor-message-from-quot-C-SplunkUniversalForwarder/m-p/149295#M97936 jmann2118 2015-01-08T18:59:33Z