Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About smvalois
smvalois
Explorer
Member since:
09-30-2014
06-05-2020
Community Statistics
| Posts | 6 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 1 |
| Member Since | 09-30-2014 |
Activity Feed
- Got Karma for Is it possible to use WMI on a Windows universal forwarder and send it to indexers and search heads running Linux?. 06-05-2020 12:47 AM
- Posted Re: Is it possible to use WMI on a Windows universal forwarder and send it to indexers and search heads running Linux? on Getting Data In. 10-02-2014 11:42 AM
- Posted Re: Is it possible to use WMI on a Windows universal forwarder and send it to indexers and search heads running Linux? on Getting Data In. 10-02-2014 08:09 AM
- Posted Re: Is it possible to use WMI on a Windows universal forwarder and send it to indexers and search heads running Linux? on Getting Data In. 10-02-2014 07:00 AM
- Posted Is it possible to use WMI on a Windows universal forwarder and send it to indexers and search heads running Linux? on Getting Data In. 10-01-2014 11:58 AM
- Tagged Is it possible to use WMI on a Windows universal forwarder and send it to indexers and search heads running Linux? on Getting Data In. 10-01-2014 11:58 AM
- Tagged Is it possible to use WMI on a Windows universal forwarder and send it to indexers and search heads running Linux? on Getting Data In. 10-01-2014 11:58 AM
- Tagged Is it possible to use WMI on a Windows universal forwarder and send it to indexers and search heads running Linux? on Getting Data In. 10-01-2014 11:58 AM
- Tagged Is it possible to use WMI on a Windows universal forwarder and send it to indexers and search heads running Linux? on Getting Data In. 10-01-2014 11:58 AM
- Tagged Is it possible to use WMI on a Windows universal forwarder and send it to indexers and search heads running Linux? on Getting Data In. 10-01-2014 11:58 AM
- Posted Re: Windows Event Logs and Non Standard Importing on Getting Data In. 09-30-2014 10:29 AM
- Posted Windows Event Logs and Non Standard Importing on Getting Data In. 09-30-2014 06:22 AM
- Tagged Windows Event Logs and Non Standard Importing on Getting Data In. 09-30-2014 06:22 AM
- Tagged Windows Event Logs and Non Standard Importing on Getting Data In. 09-30-2014 06:22 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 0 |
10-02-2014
11:42 AM
Thank you, this is similar to the method I used as well. I basically made the WMI.conf file on my windows forwarder (dropping a full version would have probably been much easier).
... View more
10-02-2014
08:09 AM
Sorry, I know I sound like a broken record here. The issue is following the instructions to get this setup. The link is here:
http://docs.splunk.com/Documentation/Splunk/6.1.3/Data/MonitorWindowsdata
Under "Configure remote event log monitoring", it says go to Data Inputs and click Remote Event Log Collections. That option is not there. All I have is TCP, UDP, Local File and Scripts. Is there something else I need to install for that to show up?
... View more
10-02-2014
07:00 AM
We operate in an environment where agents are viewed as evil. I do not personally agree with that, but will take the wins where I can get them. According to that table, splunk enterprise must be running on windows. My linux enterprise version does not list "Remote Event Log Collections" as an option under data inputs. Is there an addon I have to install?
... View more
10-01-2014
11:58 AM
1 Karma
I currently am running splunk enterprise on a Linux Distribution (Red Hat). I am following the guide to import WMI data to splunk, and there is no "Remote event log collections".
Deployment: Linux
Forwarder: Windows 7 (64 bit)
Is it possible to use WMI on a Windows forwarder and send it to indexer / search heads running linux?
... View more
09-30-2014
10:29 AM
I know that you can over ride parsers in other products like LogRhyhtm and ArcSight, I am mostly looking to see if i can force a parse on a source, if I know the data type.
... View more
09-30-2014
06:22 AM
Morning,
We run AD in our environment and the Windows server team does not wish to allow for the use of WMI calls and a service account. They already have a tool called "Event Reporter" which will package windows logs and send them Syslog. Do you know of a way to parse Non standard Windows logs? I either have to figure this out, or remap all the fields by hand using the built in field extractor.
Thank you
... View more
