About the Windows entity integration in ITE Work
There are two ways you can collect Windows data in (ITE Work). You can either use the data collection script or you can configure data collection agents manually. For information about data you can collect with this integration, see Windows data you can collect with ITE Work. Before you start collecting Windows data, make sure you satisfy the Windows integration requirements. For more information, see Windows integration requirements for ITE Work.
Collect Windows metrics and logs with the data collection script in ITE Work
The data collection script in ITE Work collects both Windows metrics and logs data. To use the data collection script you have to have internet access. The data collection script downloads a universal forwarder. If you don't have internet access, configure data collection manually. For more information, see Collect Windows metrics and logs with the data collection script in ITE Work.
Manually collect logs and metrics from a Windows host in ITE Work
You can manually set up a universal forwarder to collect metrics from a Windows host. Manually configure metrics collection for a host when you meet at least one of these conditions:
- You're collecting data from a host on a closed network with no internet access.
- You already installed a universal forwarder on the host.
- You don't have trusted URLs you can download the required packages from.
If you also want to manually collect log data from a Windows host, see Manually collect logs from a Windows host in ITE Work.
Troubleshooting
If you have problems setting up the Windows entity integration, see Troubleshoot the Windows entity integration in ITE Work.
Troubleshoot the Unix and Linux entity integration in ITE Work | Windows integration requirements for ITE Work |
This documentation applies to the following versions of Splunk® IT Essentials Work: 4.18.0, 4.18.1, 4.19.0, 4.19.1
Feedback submitted, thanks!