- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![Mayanakhan Mayanakhan](https://community.splunk.com/legacyfs/online/avatars/512855.jpg)
Mayanakhan
Explorer
07-28-2020
02:07 AM
Hi,
I am trying to on-board the DNS application logs from windows servers 2012 event logs -> "Application and Services Logs" -> "DNS Server" .
I have add the below stanza in inputs.conf for forwarder but data is not injecting.
[WinEventLog:DNS-Server]
disabled = 0
do i need to change anything in inputs.conf?
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![richgalloway richgalloway](https://community.splunk.com/legacyfs/online/avatars/140500.jpg)
richgalloway
![SplunkTrust SplunkTrust](/html/@E48BE65924041B382F8C3220FF058B38/rank_icons/splunk-trust-16.png)
SplunkTrust
07-28-2020
06:35 AM
In my inputs.conf file, the stanza name is [WinEventLog://DNS Server] (space instead of hyphen).
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![richgalloway richgalloway](https://community.splunk.com/legacyfs/online/avatars/140500.jpg)
richgalloway
![SplunkTrust SplunkTrust](/html/@E48BE65924041B382F8C3220FF058B38/rank_icons/splunk-trust-16.png)
SplunkTrust
07-28-2020
06:35 AM
In my inputs.conf file, the stanza name is [WinEventLog://DNS Server] (space instead of hyphen).
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![Mayanakhan Mayanakhan](https://community.splunk.com/legacyfs/online/avatars/512855.jpg)
Mayanakhan
Explorer
08-04-2020
11:31 PM
Yes it resolved. Thanks !!
![](/skins/images/89D5ADE867CBAF0B5A525B7E23D83D7E/responsive_peak/images/icon_anonymous_message.png)