cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
CJHindmarsh
Explorer
Member since: ‎09-05-2021
‎11-23-2021
Community Statistics
Posts 3
Solutions 1
Karma Given 2
Karma Received 0
Member Since ‎09-05-2021
Activity Feed
View All

Re: Unable to Collect SMBServer/Audit logs

by in Getting Data In
‎11-23-2021 03:35 PM
‎11-23-2021 03:35 PM
I was at the time utilizing the Splunk add on for Windows. It came with some predefined sourcetypes for Win Event logs. ... View more

Re: Unable to Collect SMBServer/Audit logs

by in Getting Data In
‎11-16-2021 02:16 PM
‎11-16-2021 02:16 PM
Yep, the above stanza is correct. I was just impatient I think. The next morning I had pretty much all the logs available to search. ... View more

Unable to Collect SMBServer/Audit logs

by in Getting Data In
‎09-06-2021 12:00 AM
‎09-06-2021 12:00 AM
I have been unable to get the universal forwarders to correctly collect the SMB Server audit logs. The inputs.conf file on the deployment server has the following stanza configured but there are no logs flowing in. The other events in the inputs file work without any issues.  ## Application and Services Logs - SMB Server Audit Log [WinEventLog://Microsoft-Windows-SMBServer/Audit] index = wineventlog disabled = 0 start_from = oldest current_only = 0 Thanks    ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎11-23-2021 06:55 PM
Karma given to
View All