All Apps and Add-ons

Hi All. We have Universal Forwarder 7.0.2 installed on DNS server. Could you please let me know whether the Addon could be used in this version?

SourabhKhampari
Engager

Hi All
Greetings.

We have DNS server installed on Windows server 2016. We are able to monitor logs like wineventlog: security, Application etc.

We have also enabled DNS logs and we are getting logs in Analytical.etl location %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-DNSServer%4Analytical.etl.

But it seems that Splunk could not read ETL file. Please help.

0 Karma
1 Solution

SourabhKhampari
Engager

Thank you for your Answers. We currently enabled debug logging as Analytical logs was not readable by Splunk. We are currently monitoring the resource utilization of DNS server, if it increases considerably, we again need to think of Analytical logs monitoring.

View solution in original post

0 Karma

SourabhKhampari
Engager

Thank you for your Answers. We currently enabled debug logging as Analytical logs was not readable by Splunk. We are currently monitoring the resource utilization of DNS server, if it increases considerably, we again need to think of Analytical logs monitoring.

0 Karma

hughkelley
Path Finder

We had the same issue (and a few others improvements we wanted with that Add On) so we ended up bundling all of our fixes here:

https://splunkbase.splunk.com/app/4300/

0 Karma

dkeck
Influencer

Splunk can´t read binary files.

In this post is a suggestion how to get around this though https://answers.splunk.com/answers/64981/monitor-windows-trace-files.html

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...