I want to monitor my printers in our corporate environment which is a Windows print server. I want to get things like the printer logs, how much printing, where clogs are, who is clogging it, any rogue printers, etc.
When reading the doc on Splunk and Windows printers monitoring (trying to post link) --> docs.splunk.com/Documentation/Splunk/6.2.2/Data/MonitorWindowsprinterinformation
I see that part way down it says that I need to have Splunk installed on Windows. We have a distributed deployment on unix. Can I install a universal forwarder on the Windows server to get this information fed back into Splunk? Is this the best way and would it accomplish what I need?