Splunk Enterprise Security

Windows Universal Forwarder GPO

a1servinem777
New Member

Hello I am having issues with my agent authentication and installation.
I set up a service account on our domains.
Created the group recommended from the documentation for users and computers.
Added the permissions to the groups and gpo and applied them to the default domain controller policy.

When I install it I under a domain account
domain\username
password

Specify the logs and send them to the deployment server.
Then I logged in the splunk dashboard and am not seeing the host.

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Video | Welcome Back to Smartness, Pedro

Remember Splunk Community member, Pedro Borges? If you tuned into Episode 2 of our Smartness interview series, ...

Detector Best Practices: Static Thresholds

Introduction In observability monitoring, static thresholds are used to monitor fixed, known values within ...

Expert Tips from Splunk Education, Observability in Action, Plus More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...