search

thr3athunt3r / thr3athunt3r.github.io

GitHub Pages
0 stars 0 forks source link

https://thr3athunt3r.github.io/splunk/2021/05/27/splunk-1.html #2

Open utterances-bot opened 3 years ago

utterances-bot commented 3 years ago

How To Collect Windows Event Logs to Splunk “AGENTLESS-LY” | Thr3at Hunt3r’s Blog

Have you ever wonder to forward windows event logs to a Splunk instance without need of mass deploying universal forwarder on every single host? This might be a solution for you! What we’re gonna do is centralize all the logs first with Windows Event Collector, then forward them with just a universal forwarder which will also be installed on the same server. So, let’s get started.

https://thr3athunt3r.github.io/splunk/2021/05/27/splunk-1.html

thr3athunt3r commented 3 years ago

Feel free to leave a comment if you have any question or encountered some trouble while setting up!