Windows Error Logs Only

[Srikesh]

Good-day, I am new and have searched for this, is there no way of setting this to pull error logs only from each windows log.

Example Application Errors & System Errors only

And can this program pull these errors from 8-10 Servers on the same domain?

Thanks Guys

[MuS]

hi Srikesh

you will not come around some reading; sit down and start here and some more here.

Splunk can handle 8-10 Servers in the same domain without any problem, just remember the service running splunk must have domain admin permission to be able to use remote WMI.

hope this helps, cheers

MuS

[MuS]

try this http://docs.splunk.com/Documentation/Splunk/4.3.2/Deploy/Routeandfilterdatad#Filter_WMI_events

[Srikesh]

Hi MuS, Thanks a million for that, helps alot... However I do not find info on how to filter only the error logs...