I am wanting to go into the Splunk Web and monitor the USBSTOR in Windows 10.  I am selecting the "New Registry Monitoring, then when I browse to the hive or key I want to monitor (USBSTOR) it isn't listed as a choice.  It resides at Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR.  The value that I am interested in is the "Start" value changes.   Can someone point me to how I can enable monitoring of this in Splunk Web?   Thanks, Marty ... View more