Splunk Tech Talks
Deep-dives for technical practitioners.

My Start Will Go On: Splunk’s TA for Windows Part 2

melissap
Splunk Employee
Splunk Employee

View theTech Talk: IT Edition, My Start Will Go On: Splunk’s TA for Windows Part 2  for part two of our Windows TA Tech Talk, where we’re focusing on our technical add-on (TA) for Windows OS. This TA for Windows makes management of many data sources—eventlog, performance sources, registry and of course standard logfiles–easier. It offers CIM compliant knowledge objects, normalizing your data and providing a unified view across the entire data domain.

Join us for part two, where we’ll dive a bit deeper into the TA as well as:

  • Tuning your inputs
  • Searching on the fly
  • Building custom visualizations and alerts

Tech Talk discussions remain open for two weeks following the live Tech Talk event. Have more questions? Check out our  Splunk Add-On for Microsoft Windows conversations in Splunk Answers community for more!

melissap
Splunk Employee
Splunk Employee

Here is a recap of the Q&A from the live session.

Enjoy.

Q: We have many server 2008r2 machines which is unsupported but the inputs appear to work just fine when deployed. Has anyone ever found a way to get this working with server 2008?
A: The Add on for Microsoft Windows does support Server 2008R2. You can find that info and other supported versions in the docs https://docs.splunk.com/Documentation/WindowsAddOn/latest/User/AbouttheSplunkAdd-onforWindows
 
 
melissap
Splunk Employee
Splunk Employee