Getting Data In

WMI on windows 2000

phoenixsecure
Engager

Hi,

I am collecting event logs thru WMI for Windows 2000 and 2003 servers, for 2003 everything seem ok but for 2000 servers the CPU on those servers hit 100%, anyone else having problem with that?

Thanks.

Tags (2)

Ledio_Ago
Splunk Employee
Splunk Employee

Splunk should install fine on Windows 2000. The only that we know for sure doesn't work is the monitoring of the Registry.

0 Karma

igor
Splunk Employee
Splunk Employee

We don't actually support Windows 2000. It is known that WMI in particular does not run well on that OS. If you want to get logs from these boxes, your best bet would be to install Splunk forwarders on the 2000 boxes, use the native event log collection method and have the logs forwarded to an indexer.

Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!