Getting Data In

Custom Windows Event Log

davidts
Path Finder

Our developers have created a custom Windows Event Log to log events from an In-House develop app. What would be the best way to index this custom event log?

Tags (3)
0 Karma

mloven_splunk
Splunk Employee
Splunk Employee

Just add in an input stanza like this.

[WinEventLog:customname]
disabled = 0
index=windows
Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...