Getting Data In

Windows: Installing universal forwarder with trusted domain


I want to install the universal forwarder on a domain controller in domain 2 with trust to another domain 1.

Do I need to use the domain account or just local account to forward the security logs to the Splunk server that is in domain 1?

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes and swag!