I was able to resolve this by editing this file: C:\Program Files\Splunk\etc\apps\splunk_app_windows_infrastructure\default\eventtypes.conf (and doing find-> "wineventlog-dns" ) and then commenting out that one stanza (was a stanza not relevant to me, espeically since it wasnt working anyway). I did the same thing for "wineventlog-ds" as i was getting an error on that as well. tks ... View more