Few DC servers not showing source=wineventlog:security. Can someone provide the troubleshooting steps to find the what change happened in configuration file or is any additional change required.
Hi!
Some DCs works correctly with the same config? In that case, did you test the connectivity? With telnet for example:
telnet <splunk.mydomain.com> >listener-port>
Only Windows:Security logs not receiving but other Windows:System and Windows: Application logs are receiving.