|
Is it possible to gather WMI stats from a machine thats not in a domain? -- rather a workgroup. I know @Lowell address this with forwarders in this question. http://answers.splunk.com/questions/7927/pulling-data-from-non-domain-machines But i wonder if its even possible to connect to a non-domain machine with WBEMTEST.exe, let alone Splunk. Anyone have a clue? |
|
It is possible indeed. Simply set up local users on all workgroup machines with the same username/password, or, if the Administrator accounts all have the same password, use this account. Make sure you grant the account you will use WMI read access on each machine. On your splunk instance performing the remote WMI connections, create a local user with the same username/password as the workgroup machines, and run splunk as this user. Splunk now will be able to remotely query the workgroup machines via WMI. |
