Memory and cpu usage does'nt update via WMI but Application and security logs are coming

mnaina — Wed, 09 Jan 2013 15:26:45 GMT

I tried to get the logs from the remote computer by using the universal forwarder.

While installing the universal forwarder I checked Windows Application, Windows System, Memory and CPU.

But I can receive only Application and security logs, Memory and CPU are not coming to the splunk server.

I also checked the local database(metric file) where splunk universal forwarder is installed, metric file contains all logs including Memory and CPU, but the forwarder can send only Application and security logs.

Anybody knows what to do....

Thanks in Advance

Re: Memory and cpu usage does'nt update via WMI but Application and security logs are coming

sunrise — Mon, 14 Jan 2013 04:02:24 GMT

I think that universal forwarder perfmon configurations in installing is not worked at ver.5.0.1.
So I set inputs.conf directly like below (using perfmon, not wmi), and restart universal forwarder, it worked.

[perfmon://Memory]
counters = % Committed Bytes In Use;Available MBytes;Committed Bytes
disabled = 0
interval = 600
object = Memory

Try it.

topic Memory and cpu usage does'nt update via WMI but Application and security logs are coming in Getting Data In

Memory and cpu usage does'nt update via WMI but Application and security logs are coming

Re: Memory and cpu usage does'nt update via WMI but Application and security logs are coming