Bitlocker Windows Events Inputs.conf

Getting Data In

I'm trying to get bitlocker events into Splunk. Below is what I have in the inputs.conf and it appears to not be working.

[WinEventLog://Microsoft-Windows-BitLocker/BitLocker Management]
index = main
disabled = 0

Get Updates on the Splunk Community!

Watch Now! In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...