Getting Data In

WMI on windows 2000

phoenixsecure
Engager

Hi,

I am collecting event logs thru WMI for Windows 2000 and 2003 servers, for 2003 everything seem ok but for 2000 servers the CPU on those servers hit 100%, anyone else having problem with that?

Thanks.

Tags (2)

Ledio_Ago
Splunk Employee
Splunk Employee

Splunk should install fine on Windows 2000. The only that we know for sure doesn't work is the monitoring of the Registry.

0 Karma

igor
Splunk Employee
Splunk Employee

We don't actually support Windows 2000. It is known that WMI in particular does not run well on that OS. If you want to get logs from these boxes, your best bet would be to install Splunk forwarders on the 2000 boxes, use the native event log collection method and have the logs forwarded to an indexer.

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...