×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
roshan
Observer
Member since: ‎07-12-2024
‎07-12-2024
Community Statistics
Posts 1
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎07-12-2024
Activity Feed
Topics I've Started
No posts to display.
View All

Re: Sysmon events not getting indexed

by in Getting Data In
‎07-12-2024 03:09 AM
‎07-12-2024 03:09 AM
This worked for us. We changed the ChannelAccess of Sysmon to that of Powershell. Run the following on cmd, wevtutil sl "Microsoft-Windows-Sysmon/Operational" /ca:<Powershell ChannelAccess>   ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎07-12-2024 03:11 AM