Can we upload or by input data by files or directory we can monitor eventlogs (evtx) files?

[RAVIKR]

In the process , Splunk is able to read the file but that inst in human readable format.I am Using this approach because SPlunk forwarder isn't installed on the server from whose event logs we want to monitor.

[adonio]

if you cant install a forwarder on that particular windows machine, find a windows machine you CAN!
forward windows event logs to the machine that has the Universal Forwarder on it, use the splunk TA for windows and have it monitor the "Forwarded Events" data

[sudosplunk]

Hello,

Short answer is no. Please have a look at my other answer for workaround.

https://answers.splunk.com/answers/673824/index-exported-evt-evtx-files.html