Getting Data In

Splunk Windows App not showing all hosts

Path Finder

I have inherited a very old version of splunk - started with 6.2.5.
I upgraded it to 7.0, which broke the Windows Infrasture app. I then upgraded to 7.3.1,
and added the new verions of the Windows Infrasture app, the Active Directory App, and the windows dns app.

I am using WMi to get performance data and windows logs (I wish it was really working).
I would say it works in a "limp" mode.

I have used the splunk doc on configing the wmi, and gpo, wmi queries, user (domain) are all correct.

My Windows Overview shows a big number with host as "16" - but when I click the "16" it shows me only 3 domain hosts.

What am I missing here?

Thanks,
eholz1

0 Karma