Onboard Windows events: DNS application logs

[Mayanakhan]

Hi, 

I am trying to on-board the DNS application logs from windows servers 2012 event logs -> "Application and Services Logs" -> "DNS Server" .

I have add the below stanza in inputs.conf for forwarder but data is not injecting. 

[WinEventLog:DNS-Server]
disabled = 0

do i need to change anything in inputs.conf?

[richgalloway · Accepted solution]

In my inputs.conf file, the stanza name is [WinEventLog://DNS Server] (space instead of hyphen).

[Mayanakhan]

Yes it resolved. Thanks !!