TA_ETW icon indicating copy to clipboard operation
TA_ETW copied to clipboard

Splunk Technology Add-On (TA) for collecting ETW events from Windows systems

Results 5 TA_ETW issues
Sort by recently updated
recently updated
newest added

Bumps [Newtonsoft.Json](https://github.com/JamesNK/Newtonsoft.Json) from 12.0.2 to 13.0.2. Release notes Sourced from Newtonsoft.Json's releases. 13.0.2 New feature - Add support for DateOnly and TimeOnly New feature - Add UnixDateTimeConverter.AllowPreEpoch property New feature...

dependencies

Hello, We have installed the app and configured config.yaml to gather a couple of events. From some time we can see that l the logs with EventID 1 are being...

Hello, how can we verify what event caused below exception? 02-13-2021 15:09:54.642 -0600 FATAL ExecProcessor - message from ""C:\Program Files\SplunkUniversalForwarder\etc\apps\blablabin\TA_ETW.exe"" Exception during streaming: name=TA_ETW://TA_ETW_DNS | System.FormatException: Input string was not...

Hello, we have installed the app on a few of our DC and we were able to start pulling the logs on some of them. Unfortunately on about ~50% of...

hello, When I change the index in the config yaml or in the inputs.conf, I stop receiving events in splunk. The index is correctly created in splunk. I only get...