All Apps and Add-ons

WinHostMon://service not retrieving the status of some services

pbsuju
Explorer

We are using WinHostMon://service stanza in input.conf to monitor the service status on windows hosts. But it doesn't seems to be retrieving the status of some services.. Eg: Splunk , Snare... Below is the config used. Any limitation for WinHostMon://Service ?.

[WinHostMon://Service]
index = winsvc
interval = 300
type = service

Tags (1)
0 Karma

pbsuju
Explorer

Yes, we were running with old version of splunk forwarder (v 5xx). After the upgrade it worked.

0 Karma

faisal_saifi
New Member

Did you able to get all service status?

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...