cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
corommendoza
Explorer
Member since: ‎05-30-2013
‎06-05-2020
Community Statistics
Posts 7
Solutions 0
Karma Given 0
Karma Received 1
Member Since ‎05-30-2013
Activity Feed
View All

Re: Microsoft-Windows-PrintService/Operational Log...

by in Getting Data In
‎10-02-2013 11:43 AM
‎10-02-2013 11:43 AM
No success. I guess no one has gotten it to work this way. ... View more

Re: Microsoft-Windows-PrintService/Operational Log...

by in Getting Data In
‎10-01-2013 11:52 AM
‎10-01-2013 11:52 AM
I'll give it a few hours. I appreciate you helping me out with this luke. ... View more

Re: Microsoft-Windows-PrintService/Operational Log...

by in Getting Data In
‎10-01-2013 11:44 AM
‎10-01-2013 11:44 AM
Removed spaces and this is what I get in the log: 10-01-2013 11:22:12.990 -0700 INFO WinEventLogInputProcessor - main-thread: Processing existing Windows Event Log 'Microsoft-Windows-PrintService/Operational' 10-01-2013 11:22:12.990 -0700 INFO WinEventLogInputProcessor - main-thread: Finished processing existing Windows Event Log 'Microsoft-Windows-PrintService/Operational': total_events='0' with empty_msg='0'. I checked server and I can see events in that log. ... View more

Re: Microsoft-Windows-PrintService/Operational Log...

by in Getting Data In
‎10-01-2013 09:05 AM
‎10-01-2013 09:05 AM
Yes, I only get these: Application Security System Hardware Events Internet Explorer Key Management Service MSExchange Management Windows Powershell I was poking around and edited /etc/apps/launcher/local/wmi.conf and added: [WMI:Event Log: Print Servers] disabled = 0 index = default interval = 5 server = servername event_log_file = Microsoft-Windows-PrintService/Operational This adds to the Remote Event Log Collections but it still doesn't pull anything. ... View more

Re: Microsoft-Windows-PrintService/Operational Log...

by in Getting Data In
‎10-01-2013 08:04 AM
‎10-01-2013 08:04 AM
Yes I can view events on that server remotely via event viewer. Splunk service is running with a domain account that has access. ... View more

Re: Microsoft-Windows-PrintService/Operational Log...

by in Getting Data In
‎09-30-2013 04:47 PM
‎09-30-2013 04:47 PM
I can see those logs on the host and I don't have a forwarder installed. I'd like to query without having to install a forwarder. Can this be done? ... View more

Microsoft-Windows-PrintService/Operational Logs

by in Getting Data In
‎09-30-2013 04:17 PM
1 Karma
‎09-30-2013 04:17 PM
1 Karma
I want to monitor who is printing to which printer on my remote print server. Eventually I only want to see event ID 307 however, I'm unable to get any events from that log. I have added the following to my local/inputs.conf: [WinEventLog:Microsoft-Windows-PrintService/Operational] disabled = 0 http://docs.splunk.com/Documentation/Splunk/5.0.2/Data/MonitorWindowsdata#Event_log_monitor_configuration_values says I need to import to the Windows Event Viewer but this is already there. I have entered the full path as shown here: http://answers.splunk.com/answers/6219/windows-2008-server-event-viewer-logs What am I missing? Thanks. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM
Karma from
View All