Splunk Enterprise Security

Windows Universal Forwarder GPO

a1servinem777
New Member

Hello I am having issues with my agent authentication and installation.
I set up a service account on our domains.
Created the group recommended from the documentation for users and computers.
Added the permissions to the groups and gpo and applied them to the default domain controller policy.

When I install it I under a domain account
domain\username
password

Specify the logs and send them to the deployment server.
Then I logged in the splunk dashboard and am not seeing the host.

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...