Hello,
I am having an issue where sometimes I can see events and sometimes not. An example is: I tested event 4625 with my account and i can see it in Splunk, but a colleague generated the same event but it does not show up in Splunk. I can see both events in the event viewer so I am not sure why this is going on. I have made sure the search with correct time selection.
Another note: I can see other events from his account in Splunk.
Thanks!
