Windows inputs and props conf, general
✓ Published0🌍 Public
Aakilbekov
Last edited Aug 29, 2019
Created on Aug 29, 2019
This example shows a Splunk configuration for collecting Windows system data, including event logs, performance counters, and scripted inputs. The `input.conf` file defines stanzas for WinEventLog, WinHostMon, WinNetMon, and perfmon collection, with specific intervals and index assignments. The `props.conf` file uses SEDCMD regex transformations to clean and format Windows event log data before indexing. The configuration relies on Splunk's built-in monitoring APIs rather than a visualization library, directing data into indexes such as wineventlog, windows, and perfmon.
AI-generated description