Configuration for windows event logs

[p_basanth]

I want to monitor windows event logs and the below is the entries of inputs.conf file. But i am not able to view the data for this index. Can someone confirm if the format of entries is correct?

inputs.conf

[default]

host = myhost

[WinEventLog:Application]

disabled = 0

index = myindex

sourcetype = WinEventLog:Application

SourceName=myapplicationname

[Ayn · Accepted solution]

Looks right, except the last line - not sure what the idea is there. That shouldn't stop the input from working though. Judging by the conf, your error does not lie there but elsewhere.