topic Re: Specify WMI input index? in Getting Data In

Specify WMI input index?

Jason — Sat, 04 Dec 2010 00:55:43 GMT

It looks like I can enable WMI via wmi.conf, but wmi.conf.spec doesn't list index= as a valid parameter for a WMI input.

Where can I specify what index WMIs get put in - the stanza for whatever script runs to get the WMI?

Jason — Sat, 04 Dec 2010 01:27:48 GMT

You have to change the index at the level of the script that collects WMI:

in inputs.conf:

[script://$SPLUNK_HOME\bin\scripts\splunk-wmi.path]
index = os

the_wolverine — Thu, 07 Aug 2014 19:40:47 GMT

Looks like in version 5+ you can set the index in wmi.conf file.