Getting Data In

I can't remote wmi on window 2000

anapat
New Member

Refer splunk version 4.x not support window 2000. So, i installed splunk version 4.1.5 on window xp and config wmi remote monitoring to window 2000 server.

I use local user to run splunk then it display error message after wmi query host. Then i use admin domain account to run splunk then i can wmi query host. But i can't found available classes of properties to choose from. after add wmi data input on splunk web.

Is there any way to add wmi remote host on window 2000 ?

Tags (2)
0 Karma

muebel
SplunkTrust
SplunkTrust

If remote wmi is an issue, maybe you could try saving the results of wmi query locally on the win2k box, and then have something on win2k3 box that reads the file, saves it, and then indexes it.

Seems a little hacky I guess, but the basic point is try to avoid using wmi.

0 Karma

muebel
SplunkTrust
SplunkTrust

You can try to script out something to get the results you want, without using wmi. Or, figure out why wmi isn't working. 0_o

0 Karma

anapat
New Member

Thank you for your answer.

I query locally wmi on window 2000 server. But it can't query result too.

0 Karma

anapat
New Member

Thank you for ftk's comment. I already edit my question.

0 Karma

ftk
Motivator

Do you mean Windows 2000 or 2003? Your last sentence makes it unclear. Can you please edit your question and specify?

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...