Windows Forwarded Events - Splunk Community

Getting Data In

Hello everybody.

I've configured Windows Universal Forwarder, but i cannot see in splunk the EventData details such as picture attached here. Can you help me on it ?

35 KB

How did you configure your Universal Forwarder? What does your architecture look like? What Windows Events/EventCodes are you looking to collect?

Get Updates on the Splunk Community!

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26 With threats moving at machine speed and attack surfaces expanding across hybrid ...

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

If you hear someone at .conf26 shouting "gear down, GEAR DOWN" across the show floor, you have found us. The ...