Refer splunk version 4.x not support window 2000. So, i installed splunk version 4.1.5 on window xp and config wmi remote monitoring to window 2000 server.
I use local user to run splunk then it display error message after wmi query host. Then i use admin domain account to run splunk then i can wmi query host. But i can't found available classes of properties to choose from. after add wmi data input on splunk web.
Is there any way to add wmi remote host on window 2000 ?
If remote wmi is an issue, maybe you could try saving the results of wmi query locally on the win2k box, and then have something on win2k3 box that reads the file, saves it, and then indexes it.
Seems a little hacky I guess, but the basic point is try to avoid using wmi.