Hi @fdarrigo -
I see your solution ingests the Windows event log. How were you able to resolve the accuracy of pages printed in the event log? I'm running a Windows Server 2016 print server, and I understand that some of the native print logging features were better on WS08/R2 than subsequent os releases - specifically with regard to pages printed. Currently, Event 307's Pages Printed (Param8) is 0. I've enabled print auditing and am not able to find anything indicating how to fix the event log's pages printed count. Any advice? How would one go about configuring Splunk to query the print queue instead? Any insight would be greatly appreciated.
Thanks,
Kayla
... View more