<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to get WMI Perf counters that are in ms in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-to-get-WMI-Perf-counters-that-are-in-ms/m-p/17081#M2126</link>
    <description>&lt;P&gt;Splunk does not actually round off any values.  It returns the values as they come from the CIM.  In the particular example, "AvgDisksecPerTransfer" is a uint32 type, and that one does not contain fractions.  See &lt;A href="http://msdn.microsoft.com/en-us/library/aa394262%28VS.85%29.aspx" rel="nofollow"&gt;http://msdn.microsoft.com/en-us/library/aa394262%28VS.85%29.aspx&lt;/A&gt; for the definition of the "Win32_PerfFormattedData_PerfDisk_PhysicalDisk" class.&lt;/P&gt;</description>
    <pubDate>Sat, 31 Jul 2010 01:51:04 GMT</pubDate>
    <dc:creator>igor</dc:creator>
    <dc:date>2010-07-31T01:51:04Z</dc:date>
    <item>
      <title>How to get WMI Perf counters that are in ms</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-get-WMI-Perf-counters-that-are-in-ms/m-p/17080#M2125</link>
      <description>&lt;P&gt;I have a WMI Perf counter query that always returns zero in Splunk as the values are always &amp;lt; 1 second. It looks like the values get rounded off in Splunk.&lt;/P&gt;

&lt;P&gt;Example WMI.conf:&lt;/P&gt;

&lt;P&gt;[WMI:LocalPhysicalDisk]&lt;/P&gt;

&lt;P&gt;disabled = 0&lt;/P&gt;

&lt;P&gt;server = localhost&lt;/P&gt;

&lt;P&gt;wql = SELECT AvgDisksecPerTransfer FROM Win32_PerfFormattedData_PerfDisk_PhysicalDisk&lt;/P&gt;

&lt;P&gt;How do I get Splunk to recognize WMI Perf counter values that are in ms (&amp;lt; 1 second)?&lt;/P&gt;</description>
      <pubDate>Fri, 09 Jul 2010 08:48:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-get-WMI-Perf-counters-that-are-in-ms/m-p/17080#M2125</guid>
      <dc:creator>COH</dc:creator>
      <dc:date>2010-07-09T08:48:48Z</dc:date>
    </item>
    <item>
      <title>Re: How to get WMI Perf counters that are in ms</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-get-WMI-Perf-counters-that-are-in-ms/m-p/17081#M2126</link>
      <description>&lt;P&gt;Splunk does not actually round off any values.  It returns the values as they come from the CIM.  In the particular example, "AvgDisksecPerTransfer" is a uint32 type, and that one does not contain fractions.  See &lt;A href="http://msdn.microsoft.com/en-us/library/aa394262%28VS.85%29.aspx" rel="nofollow"&gt;http://msdn.microsoft.com/en-us/library/aa394262%28VS.85%29.aspx&lt;/A&gt; for the definition of the "Win32_PerfFormattedData_PerfDisk_PhysicalDisk" class.&lt;/P&gt;</description>
      <pubDate>Sat, 31 Jul 2010 01:51:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-get-WMI-Perf-counters-that-are-in-ms/m-p/17081#M2126</guid>
      <dc:creator>igor</dc:creator>
      <dc:date>2010-07-31T01:51:04Z</dc:date>
    </item>
  </channel>
</rss>

