1 splunk server with PCI app installed, with IP xxx.xxx.204.136
1 Domain controller (win 2012) with IP xxx.xxx.204.200 (the domain is mydomain.com)
1 Windows server with a splunk forwarder IP xxx.xxx.204.199; I have deployed
I have ADD data from a Splunk forwarder, and I have selected sources Local Events Source (Applications, Forwarder events, security, setup and system), one by one with PCI index.
In Splunk, I have uploaded the assets via CSV file, and I can see in the App PCI - Assets Center :