topic Re: Perfmon:Memory no data even though local performance monitor displaying memory stats for Windows 2003 Server in Getting Data In

Perfmon:Memory no data even though local performance monitor displaying memory stats for Windows 2003 Server

rainhailrob — Mon, 16 Sep 2013 17:48:03 GMT

I have a Windows 2003 Server that is able to report memory stats when running the Windows performance monitor locally on the server. Unfortunately I do not see any data in Splunk for memory for this particular system. All of the other Windows 2003 Servers are displaying memory stats.

Re: Perfmon:Memory no data even though local performance monitor displaying memory stats for Windows 2003 Server

BenjaminWyatt — Mon, 16 Sep 2013 18:08:28 GMT

Do you have Splunk configured to monitor your Memory perfmon counter in inputs.conf or perfmon.conf (depending on your Splunk version)? If so, can you post the relevant configuration stanza?

Re: Perfmon:Memory no data even though local performance monitor displaying memory stats for Windows 2003 Server

linu1988 — Mon, 16 Sep 2013 18:16:51 GMT

Please check if the memory object is mentioned properly. Or it may also be possible the perfmon is corrupt and it is not present for monitoring. Refresh your performance counters.

Re: Perfmon:Memory no data even though local performance monitor displaying memory stats for Windows 2003 Server

rainhailrob — Mon, 28 Sep 2020 14:47:12 GMT

BenjaminWyatt:

inputs.conf snippet...

Memory

[perfmon://Memory]
counters = % Committed Bytes In Use;Available MBytes;Committed Bytes
disabled = 0
interval = 300
object = Memory
_TCP_ROUTING = mysplunkindexers
index = myindexname

Re: Perfmon:Memory no data even though local performance monitor displaying memory stats for Windows 2003 Server

lukejadamec — Mon, 16 Sep 2013 23:33:19 GMT

In case you have not checked, are there errors for this input in the splunkd logs?

Re: Perfmon:Memory no data even though local performance monitor displaying memory stats for Windows 2003 Server

rainhailrob — Mon, 30 Sep 2013 16:16:12 GMT

splunkd.log
ERROR ExecProcessor - message from ""c:\Program Files\SplunkUniversalForwarder\bin\splunk-perfmon.exe"" splunk-perfmon - Unable to add counter '\Memory(*)\% Committed Bytes In Use' error 0xc0000bb9\n

ERROR ExecProcessor - message from ""c:\Program Files\SplunkUniversalForwarder\bin\splunk-perfmon.exe"" splunk-perfmon - Unable to add counter '\Memory(*)\Available MBytes' error 0xc0000bb9\n

ERROR ExecProcessor - message from ""c:\Program Files\SplunkUniversalForwarder\bin\splunk-perfmon.exe"" splunk-perfmon - Unable to add counter '\Memory(*)\Committed Bytes' error 0xc0000bb9\n

Re: Perfmon:Memory no data even though local performance monitor displaying memory stats for Windows 2003 Server

lukejadamec — Mon, 30 Sep 2013 16:32:38 GMT

Based on the error, this post,

http://answers.splunk.com/answers/25644/perfmon-no-longer-working

and some google...

Try verifying that the counter is enabled, and

%Committed Bytes In Use

instead of

% Committed Bytes In Use

Re: Perfmon:Memory no data even though local performance monitor displaying memory stats for Windows 2003 Server

linu1988 — Mon, 30 Sep 2013 18:05:18 GMT

go to perfmon, check if the counters are present or not. Write the exact names with spaces, or check with my earlier comment restoring the perfmon counters if missing