https://community.splunk.com/t5/Getting-Data-In/PerfmonMk-CPU-underreports-Total-Processor-Time/m-p/563199#M100348 <P>I track the overall CPU usage on a server with:</P><P>&nbsp;</P><P>&nbsp;</P><LI-CODE lang="markup">index=mcadth_metrics host=IS20_DB sourcetype=PerfmonMk:CPU instance=_Total</LI-CODE><P>&nbsp;</P><P>&nbsp;</P><P>And it works well for all other servers, and for this server until it went down for a reboot about 10 days ago.</P><P>&nbsp;</P><P>The server's average CPU load (%_Processor_Time) is usually around 40%, but has been reporting in Splunk at about 5% since the reboot.<BR /><BR />No config was changed over the time of the reboot; and the Splunk forwarder has been restarted with no change.</P><P>Image below shows Splunk search for %_Processor_Time returning with an Average of 5.35%.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="gregorymountfor_0-1628863810242.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/15559iC0ADA0A58B1C4B90/image-size/medium?v=v2&amp;px=400" role="button" title="gregorymountfor_0-1628863810242.png" alt="gregorymountfor_0-1628863810242.png" /></span></P><P>Image below shows actual server metrics reporting at 41% utilization.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="gregorymountfor_1-1628863943750.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/15560i66B7F1F0C4938156/image-size/medium?v=v2&amp;px=400" role="button" title="gregorymountfor_1-1628863943750.png" alt="gregorymountfor_1-1628863943750.png" /></span></P><P>&nbsp;</P><P>&nbsp;</P> Fri, 13 Aug 2021 14:19:07 GMT gregorymountfor 2021-08-13T14:19:07Z https://community.splunk.com/t5/Getting-Data-In/PerfmonMk-CPU-underreports-Total-Processor-Time/m-p/563199#M100348 <P>I track the overall CPU usage on a server with:</P><P>&nbsp;</P><P>&nbsp;</P><LI-CODE lang="markup">index=mcadth_metrics host=IS20_DB sourcetype=PerfmonMk:CPU instance=_Total</LI-CODE><P>&nbsp;</P><P>&nbsp;</P><P>And it works well for all other servers, and for this server until it went down for a reboot about 10 days ago.</P><P>&nbsp;</P><P>The server's average CPU load (%_Processor_Time) is usually around 40%, but has been reporting in Splunk at about 5% since the reboot.<BR /><BR />No config was changed over the time of the reboot; and the Splunk forwarder has been restarted with no change.</P><P>Image below shows Splunk search for %_Processor_Time returning with an Average of 5.35%.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="gregorymountfor_0-1628863810242.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/15559iC0ADA0A58B1C4B90/image-size/medium?v=v2&amp;px=400" role="button" title="gregorymountfor_0-1628863810242.png" alt="gregorymountfor_0-1628863810242.png" /></span></P><P>Image below shows actual server metrics reporting at 41% utilization.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="gregorymountfor_1-1628863943750.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/15560i66B7F1F0C4938156/image-size/medium?v=v2&amp;px=400" role="button" title="gregorymountfor_1-1628863943750.png" alt="gregorymountfor_1-1628863943750.png" /></span></P><P>&nbsp;</P><P>&nbsp;</P> Fri, 13 Aug 2021 14:19:07 GMT https://community.splunk.com/t5/Getting-Data-In/PerfmonMk-CPU-underreports-Total-Processor-Time/m-p/563199#M100348 gregorymountfor 2021-08-13T14:19:07Z