Re: Receiving error: WinEventMon::enumEvtLogChanne...

sitthiporns · ‎04-20-2022

Any ideas how to resolve this one guys ?

I'm getting 1 error every min

ERROR ExecProcessor - message from "D:\SplunkUniversalForwarder\bin\splunk-winevtlog.exe" splunk-winevtlog - WinEventMon::enumEvtLogChannels: Failed to enumerate event log channels: '(1717)'.

Feblex · ‎05-30-2022

Any luck with a solution? I'm experiencing the same error in one of our servers. Tried uninstalling completely an old agent then installing a new one but got the same result.

Receiving error: WinEventMon::enumEvtLogChannels: Failed to enumerate event log channels: '(1717)'.

inputs.conf

props.conf

source

sourcetype

transforms.conf

universal forwarder

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Join the Conversation

Receiving error: WinEventMon::enumEvtLogChannels: Failed to enumerate event log channels: '(1717)'.

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.