cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
cmcbride
New Member
Member since: ‎02-22-2012
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎02-22-2012
Activity Feed
Topics I've Started
View All

Re: wmi.conf missing, WMI not working

by in Getting Data In
‎08-21-2013 12:28 PM
‎08-21-2013 12:28 PM
Thanks for the answer. I ended up using Snare for what I needed actually. ... View more

wmi.conf missing, WMI not working

by in Getting Data In
‎08-21-2013 10:54 AM
‎08-21-2013 10:54 AM
I've added a server as a remote event log source to get splunk to collect events from that server. It appears to add it correctly, but no data is collected. There are no WMI errors in my splunkd.log file for collection errors. I seem to be missing a wmi.conf file from \etc\apps\windows\default\, and I'm getting these errors on a restart: 08-21-2013 12:33:41.527 -0500 WARN ConfPathMapper - Failed to open: F:\Program Files\Splunk\etc\apps\windows\default\admon.conf: The system cannot find the file specified. 08-21-2013 12:33:41.527 -0500 WARN ConfPathMapper - Failed to open: F:\Program Files\Splunk\etc\apps\windows\default\commands.conf: The system cannot find the file specified. 08-21-2013 12:33:41.527 -0500 WARN ConfPathMapper - Failed to open: F:\Program Files\Splunk\etc\apps\windows\default\distsearch.conf: The system cannot find the file specified. 08-21-2013 12:33:41.527 -0500 WARN ConfPathMapper - Failed to open: F:\Program Files\Splunk\etc\apps\windows\default\eventgen.conf: The system cannot find the file specified. 08-21-2013 12:33:41.527 -0500 WARN ConfPathMapper - Failed to open: F:\Program Files\Splunk\etc\apps\windows\default\macros.conf: The system cannot find the file specified. 08-21-2013 12:33:41.527 -0500 WARN ConfPathMapper - Failed to open: F:\Program Files\Splunk\etc\apps\windows\default\perfmon.conf: The system cannot find the file specified. 08-21-2013 12:33:41.527 -0500 WARN ConfPathMapper - Failed to open: F:\Program Files\Splunk\etc\apps\windows\default\regmon-filters.conf: The system cannot find the file specified. 08-21-2013 12:33:41.527 -0500 WARN ConfPathMapper - Failed to open: F:\Program Files\Splunk\etc\apps\windows\default\sysmon.conf: The system cannot find the file specified. 08-21-2013 12:33:41.527 -0500 WARN ConfPathMapper - Failed to open: F:\Program Files\Splunk\etc\apps\windows\default\wmi.conf: The system cannot find the file specified. 08-21-2013 12:33:41.527 -0500 WARN ConfPathMapper - Failed to open: F:\Program Files\Splunk\etc\apps\windows\default\workflow_actions.conf: The system cannot find the file specified. I do have the Windows app installed, but we're not really using it. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM