I am setting up universal forwarders to run using service account and in Splunk documentations
https://docs.splunk.com/Documentation/Splunk/8.0.4/Installation/PrepareyourWindowsnetworkforaSplunkinstallation
the GPO section states that we need to give the account domain admin which doesnt make sense
↧