No, i downgraded my operating system to Server 2019 and everything started working.  Ran into a different issue afterwards unfortunately. Too much data was being forwarded and had to start using a heavy forwarder. ... View more

Would of been nice for Splunk support to mention this.  I've had to move on and decommission Server 2022. Installed 2019 like you suggested and everything is working as it should.  Thanks again. ... View more

Interesting, splunk support hasn't had any luck with my case yet. We've been attempting different things but no luck. I may throw in the towel and downgrade to 2019   ... View more

Really? Only 2022. I may downgrade if that's the case. I have a support ticket working with splunk and so far no luck or mention of version conflict. I may downgrade and test. ... View more

I find it strange that the other Event Logs forward just fine and not crash. It's just when forwarding the "forwarded events".  We can't be the only people using windows even collectors to collect events and then forward them to splunk server. ... View more

Can we bump this? I'm running into same issue. ... View more