Solved: How do you run script WinNetMon on universal forwa... - Splunk Community

Getting Data In

I wanna to run WinNetMon on UF and I put to SplunkUniverstalForwarder\etc\system\local\inputs.conf

1 Solution

Solution

I put it to app search/local/inputs.conf

[WinNetMon://WinNetMon]
addressFamily = ipv4;ipv6
direction = inbound;outbound
index = win_netstat
packetType = connect;accept
protocol = tcp;udp

View solution in original post

Solution

I put it to app search/local/inputs.conf

[WinNetMon://WinNetMon]
addressFamily = ipv4;ipv6
direction = inbound;outbound
index = win_netstat
packetType = connect;accept
protocol = tcp;udp

Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious! We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale" You know Splunk. You know Cisco. But have you seen ...