Hi,
I've installed splunk and configured it as a forwarder on one of our windows DC/file server last week and has been experiencing high cpu usage as reported by our administrator..we had to disable splunk services..
I've configured it to send wineventlogs for system,security and application and has no issues with other DC/file servers with the same settings.
Any idea what could be the problem?
Could it be due to the low disk space on the server thats causing it?