Solved: Enable WMI in universal forwarder

Getting Data In

I have a wmi.conf file ready to go in my universal forwarder. However I probably need to enable it in the inputs.conf.

How should I do this?

1 Solution

Solution

All I needed to do was restart!

Solution

All I needed to do was restart!

Get Updates on the Splunk Community!

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...

Enable WMI in universal forwarder