How to resolve eventid.net setup issue?

[oak]

I have installed eventid.net but it keeps saying it is not configured yet.  What am i missing in the config.  I attached screenshots to assist.

[oak]

Hi Rich,

I was mainly looking at the screenshots he had and was interested in using it as it had a much more user friendly ability to look at the events etc.  If you see the screenshots it is more user friendly so I wanted to look at that and see how it showed events and could be worked with.

[richgalloway]

Universal Forwarders only transport data from endpoints to Splunk. Visualization is another matter.  I don't know if the eventid.net dashboards will work without the matching add-on (I suspect not), but perhaps you can re-write those dashboards to use data from other add-ons.

[richgalloway]

That app is more than 4 years old and so may be incompatible with your version of Splunk.

Have you tried contacting the app author or support (support@altairtech.ca)?

[oak]

Thank You for responding and I was wondering if we want to monitor Windows Event logs using the Splunk Forwarders similar to this product if it is outdated is there an addon you could recommend.

[richgalloway]

I'm not sure what problem you hoped to solve with the eventid.net app, but most sites get by pretty well using the Universal Forwarder to monitor Windows event logs.

The Splunk Add-on for Microsoft Windows (https://splunkbase.splunk.com/app/742) may help with onboarding of Windows data, but is not necessary.