Hi,
Selecting Windows IIS logs (C:\inetpub\logs\LogFiles\W3SVC\) as event source during the installation of UF (splunkforwarder-6.5.1-f74036626f0c-x64-release.msi) resulted in data/events being forwarded to the Index (as expected), but I cannot find any entries in (C:\Program Files\SplunkUniversalForwarder\etc\system\local\inputs.conf) to show for this selection I made during the installation.
Where are the config details stored when specifying during the UF Installation?
TIA
Danny
↧