Getting Data In

I can't remote wmi on window 2000

anapat
New Member

Refer splunk version 4.x not support window 2000. So, i installed splunk version 4.1.5 on window xp and config wmi remote monitoring to window 2000 server.

I use local user to run splunk then it display error message after wmi query host. Then i use admin domain account to run splunk then i can wmi query host. But i can't found available classes of properties to choose from. after add wmi data input on splunk web.

Is there any way to add wmi remote host on window 2000 ?

Tags (2)
0 Karma

muebel
SplunkTrust
SplunkTrust

If remote wmi is an issue, maybe you could try saving the results of wmi query locally on the win2k box, and then have something on win2k3 box that reads the file, saves it, and then indexes it.

Seems a little hacky I guess, but the basic point is try to avoid using wmi.

0 Karma

muebel
SplunkTrust
SplunkTrust

You can try to script out something to get the results you want, without using wmi. Or, figure out why wmi isn't working. 0_o

0 Karma

anapat
New Member

Thank you for your answer.

I query locally wmi on window 2000 server. But it can't query result too.

0 Karma

anapat
New Member

Thank you for ftk's comment. I already edit my question.

0 Karma

ftk
Motivator

Do you mean Windows 2000 or 2003? Your last sentence makes it unclear. Can you please edit your question and specify?

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...