Splunk Search

Get windows Local login logs using WMI

khalidewaidah
Explorer

Dear ,
I have cluster setup and we need to collect local logging logs from work station using WMI without install UF on targets so I need to know the pre-request .

Tags (1)
0 Karma

woodcock
Esteemed Legend
0 Karma

xavierashe
Contributor

I would also consider using Windows Event Forwarding (WEF). WMI log collection has always been problematic for me at scale, since WMI breaks a lot. We use WEF with all our VDIs (45k+).

anmolpatel
Builder
0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...