Skip to main content
100%

Windows inputs and props conf, general

✓ Published0🌍 Public
Aakilbekov
Last edited Aug 29, 2019
Created on Aug 29, 2019

This example shows a Splunk configuration for collecting Windows system data, including event logs, performance counters, and scripted inputs. The `input.conf` file defines stanzas for WinEventLog, WinHostMon, WinNetMon, and perfmon collection, with specific intervals and index assignments. The `props.conf` file uses SEDCMD regex transformations to clean and format Windows event log data before indexing. The configuration relies on Splunk's built-in monitoring APIs rather than a visualization library, directing data into indexes such as wineventlog, windows, and perfmon.

AI-generated description

Similar vizzes