×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
sathya2471
Engager
Member since: ‎10-29-2015
‎06-05-2020
Community Statistics
Posts 2
Solutions 1
Karma Given 0
Karma Received 1
Member Since ‎10-29-2015
Activity Feed
View All

Re: Splunk App for Windows Infrastructure: All log...

by in All Apps and Add-ons
‎03-07-2016 01:17 AM
1 Karma
‎03-07-2016 01:17 AM
1 Karma
Hi, I found the answer. The key for me was "index=*" - that clued me in. It was just the indexes that were being searched by default. Settings > Access Controls > Roles > Admin > Indexes searched by default (I added msad, permon and winevents) Once i made the changes, i started seeing my data in my dashboards. ... View more

Splunk App for Windows Infrastructure: All logs ar...

by in All Apps and Add-ons
‎03-03-2016 11:01 PM
‎03-03-2016 11:01 PM
I have installed the Splunk App for Windows Infrastructure in my environment. All logs are coming to the indexer, but the dashboard is not populating. When I check for the search, it started with search: eventtype = "XXXXX" . So, when I copy paste the same search in the search bar, it is not working when I add the prefix index = "*" it is working. Can any one help? Thanks in advance ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM
Karma from
View All