This questions was asked before, but still haven't gotten a really good answer out of it. Or maybe I'm just doing this all wrong.
I'm trying to use Splunk Light to monitor the Security Logs of several Windows devices. Whenever I add a new host to monitor, rather than being able to add the host to the Server Class that I have called "Windows Hosts" in the "Data Inputs -> Event Logs Collections" page, I have to create a new Server Class and add all the hosts again to the new class. If I try to click on the existing Server Class to edit it, I get a "Page Not Found" message.
Is this correct? Am I doing something wrong? Is Light only supposed to be used for one device?
... View more