Getting Data In
Highlighted

I can't remote wmi on window 2000

New Member

Refer splunk version 4.x not support window 2000. So, i installed splunk version 4.1.5 on window xp and config wmi remote monitoring to window 2000 server.

I use local user to run splunk then it display error message after wmi query host. Then i use admin domain account to run splunk then i can wmi query host. But i can't found available classes of properties to choose from. after add wmi data input on splunk web.

Is there any way to add wmi remote host on window 2000 ?

Tags (2)
0 Karma
Highlighted

Re: I can't remote wmi on window 2000

Motivator

Do you mean Windows 2000 or 2003? Your last sentence makes it unclear. Can you please edit your question and specify?

0 Karma
Highlighted

Re: I can't remote wmi on window 2000

New Member

Thank you for ftk's comment. I already edit my question.

0 Karma
Highlighted

Re: I can't remote wmi on window 2000

SplunkTrust
SplunkTrust

If remote wmi is an issue, maybe you could try saving the results of wmi query locally on the win2k box, and then have something on win2k3 box that reads the file, saves it, and then indexes it.

Seems a little hacky I guess, but the basic point is try to avoid using wmi.

0 Karma
Highlighted

Re: I can't remote wmi on window 2000

New Member

Thank you for your answer.

I query locally wmi on window 2000 server. But it can't query result too.

0 Karma
Highlighted

Re: I can't remote wmi on window 2000

SplunkTrust
SplunkTrust

You can try to script out something to get the results you want, without using wmi. Or, figure out why wmi isn't working. 0_o

0 Karma