All Apps and Add-ons

Splunk Add-on for Microsoft Windows: Unable to get output

chanduira
Explorer

Hi,
I want some hardware informations remotely on the list of Windows servers. I have downloaded the Windows Add-on, created the inputs.conf in Splunk_TA_Windows, still unable to get the output, neither an error, seems no instance of this Add-On is found on the executing of Forwarder on the testing client?
alt text

This is the link what i was following for this execution:
https://www.splunk.com/blog/2013/10/09/windows-host-monitoring-in-splunk-6.html

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi chanduira,
Where do you installed Splunk_TA_Windows on Indexer or Forwarder?
This TA can be used only on Forwarder.

Did you tested the connection between forwarder and indexer?
Did Indexer receive _internal logs (index=_internal host=your_host)

Bye.
Giuseppe

0 Karma

chanduira
Explorer

Hi Giuseppe,

I have installed Splunk_TA_Windows on the forwarder.
Connection is open at port 9997 between Forwarder and Indexer.
Indexer is receiving my other app logs from the same forwarder except Splunk_TA_Windows.

Thanks Giuseppe for your response.

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...