I have Splunk setup with the universal forwarder installed on all of my Windows machines sending the event logs to Splunk. Collecting all of the event logs with Splunk is working great. Now I was ...
I have visions of regularly dumping and clearing Windows event logs and storing them in the medium-long term in a SQL database.<BR><BR>Why? So I can query them -<BR>"Show me all previous occurances of ...