Security

Do not receive Windows Event Logs but Perfmon logs from Domain Controller

jan_wohlers
Path Finder

Hey everyone,

it's me again. Today I have the problem, that I only get perfmon logs from 2 Domain controllers. We use a deployment server and all other dcs are forwarding all events except these 2. Do you have any Idea why these DCs only forwarding perfmon logs but no windows security eventlogs?

I don't think that this is a firewall problem because perfmon logs are coming in.

Thanks for any reply.

/Jan

Tags (2)
0 Karma

MarioM
Motivator

I would check locally to see if you can view any new events from eventviewer itself and if the case i would check the splunkforwarder\var\log\splunk\splunkd.log for any errors...

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!