Hi, I am trying to capture print events from the Print Servers on our network. I have enabled print logs on all print servers, and I would like to get the logs in to splunk automatically, similar to how Windows event logs automatically forward to splunk. I have looked at the instructions here https://docs.splunk.com/Documentation/Splunk/8.0.0/Data/MonitorWindowsprinterinformationbut it looks like adding a "Data Input" only gets logs from the local machine. I see where it suggests editing the inputs.conf file, is that what I need to do? Will that allow the Print Logs from remote print servers to forward on to my splunk server?
Giuseppe, thank you for the response, but I am trying to get the logs from about 150-200 printers directly from the Print Servers that these printers reside on.
