Windows Forwarded Events - Splunk Community

Getting Data In

Hello everybody.

I've configured Windows Universal Forwarder, but i cannot see in splunk the EventData details such as picture attached here. Can you help me on it ?

35 KB

How did you configure your Universal Forwarder? What does your architecture look like? What Windows Events/EventCodes are you looking to collect?

Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...

SplunkTrust Application Period is Officially OPEN!

It's that time, folks! The application/nomination period for the 2026-2027 SplunkTrust is officially open. If ...