All Apps and Add-ons

Splunk Add-on for Microsoft Windows: Unable to get output

chanduira
Explorer

Hi,
I want some hardware informations remotely on the list of Windows servers. I have downloaded the Windows Add-on, created the inputs.conf in Splunk_TA_Windows, still unable to get the output, neither an error, seems no instance of this Add-On is found on the executing of Forwarder on the testing client?
alt text

This is the link what i was following for this execution:
https://www.splunk.com/blog/2013/10/09/windows-host-monitoring-in-splunk-6.html

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi chanduira,
Where do you installed Splunk_TA_Windows on Indexer or Forwarder?
This TA can be used only on Forwarder.

Did you tested the connection between forwarder and indexer?
Did Indexer receive _internal logs (index=_internal host=your_host)

Bye.
Giuseppe

0 Karma

chanduira
Explorer

Hi Giuseppe,

I have installed Splunk_TA_Windows on the forwarder.
Connection is open at port 9997 between Forwarder and Indexer.
Indexer is receiving my other app logs from the same forwarder except Splunk_TA_Windows.

Thanks Giuseppe for your response.

0 Karma
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...