https://community.splunk.com/t5/Splunk-Search/wql-query-not-returning-any-events-WMI-Services/m-p/513572#M144096 <P>Hello,</P><P>Below query in wmi.conf file is not returning any events . But other queries are working.</P><P>Please do suggest if anything is wrong</P><P>[WMI:Services]<BR />interval = 60<BR />wql = SELECT Name, State, Status FROM Win32_Service WHERE (Name = '*DynamicsNav*' OR Name = '*SQL*' OR Name = '*MsDts*')<BR />disabled = 0<BR />index="myIndex"</P> Tue, 11 Aug 2020 13:14:34 GMT dkgs 2020-08-11T13:14:34Z https://community.splunk.com/t5/Splunk-Search/wql-query-not-returning-any-events-WMI-Services/m-p/513572#M144096 <P>Hello,</P><P>Below query in wmi.conf file is not returning any events . But other queries are working.</P><P>Please do suggest if anything is wrong</P><P>[WMI:Services]<BR />interval = 60<BR />wql = SELECT Name, State, Status FROM Win32_Service WHERE (Name = '*DynamicsNav*' OR Name = '*SQL*' OR Name = '*MsDts*')<BR />disabled = 0<BR />index="myIndex"</P> Tue, 11 Aug 2020 13:14:34 GMT https://community.splunk.com/t5/Splunk-Search/wql-query-not-returning-any-events-WMI-Services/m-p/513572#M144096 dkgs 2020-08-11T13:14:34Z