https://community.splunk.com/t5/Getting-Data-In/INPUTS-CONF/m-p/253429#M99194 <BLOCKQUOTE> <P>... or should i add that in the inputs.conf at the universal forwarder local level or ...<BR /> This seems to be the right thing to do.</P> </BLOCKQUOTE> Mon, 21 Mar 2016 14:54:45 GMT ddrillic 2016-03-21T14:54:45Z https://community.splunk.com/t5/Getting-Data-In/INPUTS-CONF/m-p/253428#M99193 <P>HI,</P> <P>Beginner at splunk here, can I add custom stanzas to windows -add -on to collect server roles data, or should i add that in the <BR /> inputs.conf at the universal forwarder local level or to the inputs.conf file of the windows add on.?</P> <P>my aim is to just collect log files like IIS,certificate services and so on.</P> <P>q2. Inorder to monitor windows host information from other universal forwarders, do i have to intall splunk enterprise on windows only. <BR /> can i not intall it on ubuntu, forward the relevant data using universal forwarders to the splunk enterprise which is on windows ? </P> Mon, 21 Mar 2016 11:41:29 GMT https://community.splunk.com/t5/Getting-Data-In/INPUTS-CONF/m-p/253428#M99193 tejasplunk 2016-03-21T11:41:29Z https://community.splunk.com/t5/Getting-Data-In/INPUTS-CONF/m-p/253429#M99194 <BLOCKQUOTE> <P>... or should i add that in the inputs.conf at the universal forwarder local level or ...<BR /> This seems to be the right thing to do.</P> </BLOCKQUOTE> Mon, 21 Mar 2016 14:54:45 GMT https://community.splunk.com/t5/Getting-Data-In/INPUTS-CONF/m-p/253429#M99194 ddrillic 2016-03-21T14:54:45Z