Getting Data In

In Splunk 7.0.1 Enterprise, how do I get data from my machine to the Splunk server?

bccocek
New Member

I am new to a project that utilizes Splunk 7.0.1 Enterprise. I have been monitoring the data on the Enterprise server and noticed that none of the Event Log errors (specifically from Microsoft AppLocker) from my machine are appearing on the server. I have read the manuals and have not discovered anything that will help my situation. Does anyone know were to find a step by step procedure to set my machine up to supply Event Log data to the Splunk server?

Thanks.

Tags (1)
0 Karma

nswondem
Path Finder

Hello bccocek,

Do you have the Windows TA installed? Also, you may want to consider the inputs specified in this previous Answers response.

https://answers.splunk.com/answers/134501/applocker-monitoring.html

Good luck!

Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...