https://community.splunk.com/t5/Getting-Data-In/perfmon-for-physicaldisk/m-p/99163#M20744 <P>[PERFMON:PhysicalDisk] </P> <P>interval = 15 </P> <P>object = PhysicalDisk</P> <P>counters = Disk Writes/sec; Disk Reads/sec; % Disk Read Time; % Disk Write Time; % Disk Time </P> <P>disabled = 0 </P> <P>instances = "1 D:"</P> <P>index = perfmon_disk</P> <P>when I have instances = * it works just fine but I want just the D drive.<BR /><BR /> What is below is what i get from the splunk interface.<BR /><BR /> (instance="1 D:")</P> Thu, 24 Jan 2013 23:50:37 GMT mlevenson 2013-01-24T23:50:37Z https://community.splunk.com/t5/Getting-Data-In/perfmon-for-physicaldisk/m-p/99163#M20744 <P>[PERFMON:PhysicalDisk] </P> <P>interval = 15 </P> <P>object = PhysicalDisk</P> <P>counters = Disk Writes/sec; Disk Reads/sec; % Disk Read Time; % Disk Write Time; % Disk Time </P> <P>disabled = 0 </P> <P>instances = "1 D:"</P> <P>index = perfmon_disk</P> <P>when I have instances = * it works just fine but I want just the D drive.<BR /><BR /> What is below is what i get from the splunk interface.<BR /><BR /> (instance="1 D:")</P> Thu, 24 Jan 2013 23:50:37 GMT https://community.splunk.com/t5/Getting-Data-In/perfmon-for-physicaldisk/m-p/99163#M20744 mlevenson 2013-01-24T23:50:37Z https://community.splunk.com/t5/Getting-Data-In/perfmon-for-physicaldisk/m-p/99164#M20745 <P>What's the question?</P> Fri, 25 Jan 2013 08:20:50 GMT https://community.splunk.com/t5/Getting-Data-In/perfmon-for-physicaldisk/m-p/99164#M20745 martin_mueller 2013-01-25T08:20:50Z https://community.splunk.com/t5/Getting-Data-In/perfmon-for-physicaldisk/m-p/99165#M20746 <P>I only want the perf data from a single drive IE the D-drive not all drives and not the total.</P> Fri, 25 Jan 2013 17:10:34 GMT https://community.splunk.com/t5/Getting-Data-In/perfmon-for-physicaldisk/m-p/99165#M20746 mlevenson 2013-01-25T17:10:34Z