Receiving error: WinEventMon::enumEvtLogChannels: ...

sitthiporns · ‎04-20-2022

Any ideas how to resolve this one guys ?

I'm getting 1 error every min

ERROR ExecProcessor - message from "D:\SplunkUniversalForwarder\bin\splunk-winevtlog.exe" splunk-winevtlog - WinEventMon::enumEvtLogChannels: Failed to enumerate event log channels: '(1717)'.

Feblex · ‎05-30-2022

Any luck with a solution? I'm experiencing the same error in one of our servers. Tried uninstalling completely an old agent then installing a new one but got the same result.

Receiving error: WinEventMon::enumEvtLogChannels: Failed to enumerate event log channels: '(1717)'.

inputs.conf

props.conf

source

sourcetype

transforms.conf

universal forwarder

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

Join the Conversation

Receiving error: WinEventMon::enumEvtLogChannels: Failed to enumerate event log channels: '(1717)'.

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.