This Add-On pretends to fill the gap of having the information of the WEC subscriptions (details and runtime status) in a central place. It leverages on the fact of having a Splunk Heavy Forwarder installed on your WEC server.
This Add-On will extract the following information from your WEC server:
- Subscription details and related event log statistics
- Subscription runtime status
- Pruned inactive event sources from subcription registry entry
https://github.com/darizotas/ta-windows-wec