We need Splunk to be able to poll remote hosts for WMI events. How do we run Splunk as an account that is NOT part of the DA group? This is an issue with our System Administrator not allowing Splunk user to be part of DA.
I've seen a lot of posts and questions/answers and some documentation but nothing straight-forward.
