https://community.splunk.com/t5/Getting-Data-In/splunk-how-to-get-unix-perfmon/m-p/59836#M11830 <P>./splunk add monitor col1</P> <P>what's the col1?</P> Wed, 13 Mar 2013 10:14:07 GMT dengjin 2013-03-13T10:14:07Z https://community.splunk.com/t5/Getting-Data-In/splunk-how-to-get-unix-perfmon/m-p/59836#M11830 <P>./splunk add monitor col1</P> <P>what's the col1?</P> Wed, 13 Mar 2013 10:14:07 GMT https://community.splunk.com/t5/Getting-Data-In/splunk-how-to-get-unix-perfmon/m-p/59836#M11830 dengjin 2013-03-13T10:14:07Z https://community.splunk.com/t5/Getting-Data-In/splunk-how-to-get-unix-perfmon/m-p/59837#M11831 <P>Hey dengjin,</P> <P>I think I understand what you are saying here. The command "./splunk add monitor col1" would be monitoring standard output that perfmon would be printing out to...You are probably best to be running your perfmon command that outputs to a text file and then running your monitor command to monitor that text file.</P> <P>eg;<BR /> ./splunk add monitor /var/log/perfmon.log</P> <P>Please let me know if I have missed what you are asking.</P> <P>Regards Vince</P> Thu, 14 Mar 2013 00:57:01 GMT https://community.splunk.com/t5/Getting-Data-In/splunk-how-to-get-unix-perfmon/m-p/59837#M11831 vincesesto 2013-03-14T00:57:01Z