Hello,
Running Splunk 6.6.0 and getting the following error on the FireEye app 3.1.1 dashboard "Eventtype 'wineventlog-dns' does not exist or is disabled. How do I fix this issue? Sorry we are new to Splunk.
Thank you for any help!
just go to settings --eventtypes and create eventtype with the log type , in case my case i created as below and issue resolved :
keep both the name & search string as as wineventlog-dns
wineventlog-dns
make permission as global
status as enable
let me know if you still have any queries please:)
Welcome to Splunk!
quick search in this portal shows some answers, for example:
https://answers.splunk.com/answers/433485/message-eventtype-wineventlog-ds-does-not-exist-or.html
https://answers.splunk.com/answers/442280/event-type-disabled.html
hope it helps