WMI Splunk pull remote logs

[JPaule]

What further configuration is needed to pull WMI logs from remote servers, currently we are only getting back data from the local host?

Followed this documentation and ensured permissions were correct, to no avail:
http://docs.splunk.com/Documentation/Splunk/7.1.1/Data/MonitorWMIdata

[adonio]

why WMI and not Universal Forwarder?

[JPaule]

Do you mean use UF to get WMI data? I need WMI because it's the only way to get a certain type of data. I'm trying to pull in data for windows service accounts that are running services across all 200 of my servers.

[adonio]

what kind of data are you looking to get out of your 200 windows machines?
i am almost 100% positive you can leverage the UF to bring that data, easier and cleaner than WMI