Hi, We deployed an UF on a Win server 2022 and enabled the [WinEventLog://Security] log collection.  The log collection stops for hours sometime, and we see this error : ERROR ExecProcessor [6468 ExecProcessor] - message from ""C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe"" WinEventCommonChannel - WinEventLogChannelBase::transADObject: Failed to convert guid string to guid structure: Invalid class string After a few hours or minutes (randomly), Splunk starts again the log collection and then stops again. And all of that witout any service restart. It only happens with Security Event logs. No issue with Application or System.   Has anyone seen this error before? Splunk UF version : 9.0.5 (64bits) Splunk_TA_windows : 8.7.0   ... View more