All Apps and Add-ons

Hi All. We have Universal Forwarder 7.0.2 installed on DNS server. Could you please let me know whether the Addon could be used in this version?

SourabhKhampari
Engager

Hi All
Greetings.

We have DNS server installed on Windows server 2016. We are able to monitor logs like wineventlog: security, Application etc.

We have also enabled DNS logs and we are getting logs in Analytical.etl location %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-DNSServer%4Analytical.etl.

But it seems that Splunk could not read ETL file. Please help.

0 Karma
1 Solution

SourabhKhampari
Engager

Thank you for your Answers. We currently enabled debug logging as Analytical logs was not readable by Splunk. We are currently monitoring the resource utilization of DNS server, if it increases considerably, we again need to think of Analytical logs monitoring.

View solution in original post

0 Karma

SourabhKhampari
Engager

Thank you for your Answers. We currently enabled debug logging as Analytical logs was not readable by Splunk. We are currently monitoring the resource utilization of DNS server, if it increases considerably, we again need to think of Analytical logs monitoring.

0 Karma

hughkelley
Path Finder

We had the same issue (and a few others improvements we wanted with that Add On) so we ended up bundling all of our fixes here:

https://splunkbase.splunk.com/app/4300/

0 Karma

dkeck
Influencer

Splunk can´t read binary files.

In this post is a suggestion how to get around this though https://answers.splunk.com/answers/64981/monitor-windows-trace-files.html

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...