Getting Data In

How can I write a wineventlog input for this hypenated root level folder?

splunk219783
Path Finder

Usually splunk seems to interpret hypens for event viewer as folders.  I have this input but its not working.

[WinEventLog://Microsoft-ServerManagementExperience
disabled = 0
index = wineventlog

Here is a screenshot of the folder i'd like to monitor with Splunk.

EventViewer.PNG

Labels (2)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...