Monitoring Splunk

How to capture remote Print Server Print Data?

akarbs
Explorer

Hi, I am trying to capture print events from the Print Servers on our network. I have enabled print logs on all print servers, and I would like to get the logs in to splunk automatically, similar to how Windows event logs automatically forward to splunk. I have looked at the instructions here https://docs.splunk.com/Documentation/Splunk/8.0.0/Data/MonitorWindowsprinterinformationbut it looks like adding a "Data Input" only gets logs from the local machine. I see where it suggests editing the inputs.conf file, is that what I need to do? Will that allow the Print Logs from remote print servers to forward on to my splunk server?

Tags (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @akarbs,
I had a similar problem and I solved parsing the web interface of the printer and extracting the print jobs from him!

Ciao.
Giuseppe

akarbs
Explorer

Giuseppe, thank you for the response, but I am trying to get the logs from about 150-200 printers directly from the Print Servers that these printers reside on.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...