topic Re: How to write query for Windows Remote Desktop Connection in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-write-query-for-Windows-remote-desktop-connection/m-p/599716#M208734 <P>Question is what kind of data you have in your Splunk.</P><P>Remember that Splunk is a data analytics solution, not an EDR, A/V, web-gateway or anything else.</P><P>So in order to find some information in it you first have to ingest the data. In other words - if you're not monitoring the system you want to query Splunk about, you won't get any information because Splunk doesn't know anything about.</P> Mon, 30 May 2022 06:36:46 GMT PickleRick 2022-05-30T06:36:46Z How to write query for Windows remote desktop connection? https://community.splunk.com/t5/Splunk-Search/How-to-write-query-for-Windows-remote-desktop-connection/m-p/599508#M208677 <P>I am looking for Splunk query to find out Windows remote desktop service status and also to find to port 3389 is listening on server..</P> Mon, 30 May 2022 23:37:49 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-query-for-Windows-remote-desktop-connection/m-p/599508#M208677 afraanajam 2022-05-30T23:37:49Z Re: How to write query for Windows Remote Desktop Connection https://community.splunk.com/t5/Splunk-Search/How-to-write-query-for-Windows-remote-desktop-connection/m-p/599712#M208732 <P>Any advice pls.</P> Mon, 30 May 2022 03:14:15 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-query-for-Windows-remote-desktop-connection/m-p/599712#M208732 afraanajam 2022-05-30T03:14:15Z Re: How to write query for Windows Remote Desktop Connection https://community.splunk.com/t5/Splunk-Search/How-to-write-query-for-Windows-remote-desktop-connection/m-p/599716#M208734 <P>Question is what kind of data you have in your Splunk.</P><P>Remember that Splunk is a data analytics solution, not an EDR, A/V, web-gateway or anything else.</P><P>So in order to find some information in it you first have to ingest the data. In other words - if you're not monitoring the system you want to query Splunk about, you won't get any information because Splunk doesn't know anything about.</P> Mon, 30 May 2022 06:36:46 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-query-for-Windows-remote-desktop-connection/m-p/599716#M208734 PickleRick 2022-05-30T06:36:46Z