Can anyone please tell me how to Configure Splunk Enterprise to receive Active Directory/Windows Event Logs from Snare. I know how to configure using Splunk Universal Forwarder but i don't know how can it be done without using a Splunk Forwarder?
↧