I need to index and search Event Logs from a few Windows 7 and 8 Desktops, but I don't use a Domain Controller.
This app has some prerequisites on the Configuration page, and it won't let me continue unless I specify AD parameters.
How can I use this app without a Domain Controller?
Dotty...
This a current known bug in the Windows Infra app. Should be fixed next release.
Current work around, install a domain controller with relevant AD TA's and index the data to get the data sources available.
Another option I proposed in a previous post: Install eventgen and the windows AD TA's and enable eventgen for a little bit. This should generate the required data sources, and hopefully allow the app to be installed. I havent heard back if this worked.
If you try the datagen, post the results, as that is the quickest and easiest fix.
Lets say I install the Domain Controller, do I need the Windows Desktops to join the Domain? because I cant do that.
Also, will a be able to remove the DC after I finished configuring the AD TA and keep indexing the Desktops?
Yes, you should be able to remove the DC once you get the required events to pass the data check.