https://community.splunk.com/t5/Getting-Data-In/TA-Exchange-2013-ClientAccess-inputs-conf-throttling-counters/m-p/135681#M27943 <P>Changed the macro to:</P> <P>( object="MSExchange Throttling" OR object="MSExchange User Throttling" )</P> <P>I'm not sure if the more correct fix would have been to update the inputs.conf in the TA, but this made the Client Access Servers dashboard work.</P> Thu, 17 Apr 2014 23:00:49 GMT edonze 2014-04-17T23:00:49Z https://community.splunk.com/t5/Getting-Data-In/TA-Exchange-2013-ClientAccess-inputs-conf-throttling-counters/m-p/135680#M27942 <P>The object= line in the inputs.conf for TA-Exchange-2013-ClientAccess doesn't match the throttling-counters search macro. See below:</P> <P>[perfmon://MSExchange_Throttling]<BR /> index=perfmon<BR /> object=MSExchange User Throttling<BR /> instances=*<BR /> counters=*<BR /> interval=30<BR /> disabled=false</P> <P>throttling-counters macro:</P> <P>object="MSExchange Throttling"</P> Thu, 17 Apr 2014 22:56:22 GMT https://community.splunk.com/t5/Getting-Data-In/TA-Exchange-2013-ClientAccess-inputs-conf-throttling-counters/m-p/135680#M27942 edonze 2014-04-17T22:56:22Z https://community.splunk.com/t5/Getting-Data-In/TA-Exchange-2013-ClientAccess-inputs-conf-throttling-counters/m-p/135681#M27943 <P>Changed the macro to:</P> <P>( object="MSExchange Throttling" OR object="MSExchange User Throttling" )</P> <P>I'm not sure if the more correct fix would have been to update the inputs.conf in the TA, but this made the Client Access Servers dashboard work.</P> Thu, 17 Apr 2014 23:00:49 GMT https://community.splunk.com/t5/Getting-Data-In/TA-Exchange-2013-ClientAccess-inputs-conf-throttling-counters/m-p/135681#M27943 edonze 2014-04-17T23:00:49Z