Getting Data In

Bitlocker Windows Events Inputs.conf

New Member

I'm trying to get bitlocker events into Splunk. Below is what I have in the inputs.conf and it appears to not be working.

[WinEventLog://Microsoft-Windows-BitLocker/BitLocker Management]
index = main
disabled = 0

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.