How to parse Deep Security Log Inspection Windows Events in Splunk??

[alaquerre]

Hi Everyone so we are forwarding the Trend Micro Logs to a Splunk Agent that sends the logs to the Splunk server. The sourcetype is logged as Deep Security however i noticed the windows files are not being parsed properly and also i noticed i cannot view the Deep Security Agent versions ...

Any help would be great

Thank you,

Alex,

[sudosplunk]

Hello,

Can you provide more information about your configuration settings. For starters, inputs.conf and props.conf