Do not receive Windows Event Logs but Perfmon logs from Domain Controller

Path Finder

Hey everyone,

it's me again. Today I have the problem, that I only get perfmon logs from 2 Domain controllers. We use a deployment server and all other dcs are forwarding all events except these 2. Do you have any Idea why these DCs only forwarding perfmon logs but no windows security eventlogs?

I don't think that this is a firewall problem because perfmon logs are coming in.

Thanks for any reply.


Tags (2)
0 Karma


I would check locally to see if you can view any new events from eventviewer itself and if the case i would check the splunkforwarder\var\log\splunk\splunkd.log for any errors...

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!