https://community.splunk.com/t5/Getting-Data-In/WMI-polling-on-64-bit-Windows/m-p/72794#M14852 <P>When I use the WMI collector below: I get this info"Microsoft Windows Server 2008 R2 Enterprise, Win32_ComputerSystem, 64-bit, 7601"</P> <P>[WMI:LocalOSInfo]</P> <P>interval = 21600</P> <P>disabled = 0</P> <P>server = localhost</P> <P>wql = select * from Win32_OperatingSystem</P> <P>I am collecting the "WMI:LocalProcesses" info on only one process from all my 2008 64bit systems.</P> <P>Try collecting the "LocalOSInfo" like this (select * from Win32_OperatingSystem<BR /> ) and see what version your running</P> <P>If you get the same info I get then try collecting from one process only like this(SELECT Name, PercentProcessorTime FROM Win32_PerfFormattedData_PerfProc_Process WHERE Name = "splunkd")</P> <P>Hope this helps</P> Mon, 28 Sep 2020 11:56:00 GMT hartfoml 2020-09-28T11:56:00Z https://community.splunk.com/t5/Getting-Data-In/WMI-polling-on-64-bit-Windows/m-p/72793#M14851 <P>Need your help to configure UF in my windows 64 bit machine , have configure UF and getting WMI data but i am unable to get LocalProcesses, have created wmi.conf and following are the configuration </P> <PRE><CODE>[WMI:LocalPhysicalDisk] interval = 60 wql = select Name, CurrentDiskQueueLength, DiskBytesPerSec, PercentDiskReadTime, PercentDiskWriteTime, PercentDiskTime from Win32_PerfFormattedData_PerfDisk_PhysicalDisk index = default disabled = 0 [WMI:LocalProcesses] interval = 60 wql = select Name, IDProcess, PrivateBytes, PercentProcessorTime from Win32_PerfFormattedData_PerfProc_Process index = default disabled = 0 [WMI:Memory] interval = 60 wql = select PagesPerSec, AvailableMBytes, CommittedBytes, PercentCommittedBytesInUse from Win32_PerfFormattedData_PerfOS_Memory index = default disabled = 0 [WMI:CPUTime] interval = 60 wql = SELECT PercentProcessorTime,PercentUserTime FROM Win32_PerfFormattedData_PerfOS_Processor WHERE Name="_Total" index = default disabled = 0 </CODE></PRE> <P>I am getting every thing except "WMI:LocalProcesses" , i dont understand the cause of this , it is b'cos of i am 64bit machine if so, what configuration have to make to get the data.</P> <P>Thanks in advance.</P> Tue, 12 Jun 2012 08:16:04 GMT https://community.splunk.com/t5/Getting-Data-In/WMI-polling-on-64-bit-Windows/m-p/72793#M14851 vaibhavbeohar 2012-06-12T08:16:04Z https://community.splunk.com/t5/Getting-Data-In/WMI-polling-on-64-bit-Windows/m-p/72794#M14852 <P>When I use the WMI collector below: I get this info"Microsoft Windows Server 2008 R2 Enterprise, Win32_ComputerSystem, 64-bit, 7601"</P> <P>[WMI:LocalOSInfo]</P> <P>interval = 21600</P> <P>disabled = 0</P> <P>server = localhost</P> <P>wql = select * from Win32_OperatingSystem</P> <P>I am collecting the "WMI:LocalProcesses" info on only one process from all my 2008 64bit systems.</P> <P>Try collecting the "LocalOSInfo" like this (select * from Win32_OperatingSystem<BR /> ) and see what version your running</P> <P>If you get the same info I get then try collecting from one process only like this(SELECT Name, PercentProcessorTime FROM Win32_PerfFormattedData_PerfProc_Process WHERE Name = "splunkd")</P> <P>Hope this helps</P> Mon, 28 Sep 2020 11:56:00 GMT https://community.splunk.com/t5/Getting-Data-In/WMI-polling-on-64-bit-Windows/m-p/72794#M14852 hartfoml 2020-09-28T11:56:00Z