Windows Forwarded Events - Splunk Community

Getting Data In

Hello everybody.

I've configured Windows Universal Forwarder, but i cannot see in splunk the EventData details such as picture attached here. Can you help me on it ?

35 KB

How did you configure your Universal Forwarder? What does your architecture look like? What Windows Events/EventCodes are you looking to collect?

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...