Fireeye dashboard error "eventtype wineventlog-dns' does not exit/disabled

[rapture005]

Hello,

Running Splunk 6.6.0 and getting the following error on the FireEye app 3.1.1 dashboard "Eventtype 'wineventlog-dns' does not exist or is disabled. How do I fix this issue? Sorry we are new to Splunk.

Thank you for any help!

[Riasudin]

just go to settings --eventtypes and create eventtype with the log type , in case my case i created as below and issue resolved :

keep both the name & search string as as wineventlog-dns
wineventlog-dns

make permission as global

status as enable

let me know if you still have any queries please:)

[adonio]

Welcome to Splunk!
quick search in this portal shows some answers, for example:
https://answers.splunk.com/answers/433485/message-eventtype-wineventlog-ds-does-not-exist-or.html
https://answers.splunk.com/answers/442280/event-type-disabled.html
hope it helps