Getting Data In

Can you help me configure my forwarder to send data between Domain Controller and Event Viewer?

jackmanfredi
New Member

Hello,

I have purchase Splunk Enterprise 1GB/day and I want to configure the forwarder on Domain Controller to send data about Security Events on Event Viewer. I want to index all access of domain admins.

How can I limit the indexer to send only events of access by domain admins?

Thanks

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!