All Apps and Add-ons
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question

Why is information within the event log missing in Splunk after they are collected from the server?

Gayathirikuppus
New Member
‎03-23-2018 02:49 AM

We are using Windows infrastructure app to collect the windows event log.

In our criteria, we have the event logs getting into Splunk but some of the event code is missing.

Could you please let me know what are possible ways to troubleshoot this issue?

0 Karma
Reply

alemarzu
Motivator
‎03-23-2018 12:47 PM

Hello there @Gayathirikuppusamy

  • Have you check your auditing policys ? Perhaps the events you are expecting to see are not enabled on Windows.
  • What about Windows Event Viewer? Did you find that particular EventCode in there?
0 Karma
Reply
Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...