topic Perfmon process elapsed time not showing individual instances in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Perfmon-process-elapsed-time-not-showing-individual-instances/m-p/333382#M61631 <PRE><CODE>Inputs.conf shows: [perfmon://Process] object = Process interval = 120 counters = Elapsed Time instances = w3wp* </CODE></PRE> <P>Perfmon itself shows 6 instances of w3wp <CODE>(w3wp, w3wp#1, w3wp#2, w3wp#3, w3wp#4, w3wp#5, w3wp#6)</CODE></P> <P>Yet when you view the results in splunk <CODE>(sourcetype="Perfmon:Process")</CODE>, every Instance value is w3wp*.<BR /> I would expect it to list 6 entries each time period, one for each of the w3wp processes.</P> <P>I can't tell whether it is averaging all w3wp processes or whether it is ignoring all the w3wp# instances (perhaps because the hashtag # is a comment symbol in config files?).</P> <P>So thoughts on that?<BR /> Also, I would like to explicitly list each w3wp process in the inputs.conf as such.</P> <P><CODE>instances = w3wp;w3wp#1;w3wp#2;w3wp#3;w3wp#4;w3wp#5;w3wp#6</CODE></P> <P>However, # is a comment symbol so how do I escape the #?</P> Wed, 24 Jan 2018 17:59:25 GMT cn_jluke 2018-01-24T17:59:25Z Perfmon process elapsed time not showing individual instances https://community.splunk.com/t5/Getting-Data-In/Perfmon-process-elapsed-time-not-showing-individual-instances/m-p/333382#M61631 <PRE><CODE>Inputs.conf shows: [perfmon://Process] object = Process interval = 120 counters = Elapsed Time instances = w3wp* </CODE></PRE> <P>Perfmon itself shows 6 instances of w3wp <CODE>(w3wp, w3wp#1, w3wp#2, w3wp#3, w3wp#4, w3wp#5, w3wp#6)</CODE></P> <P>Yet when you view the results in splunk <CODE>(sourcetype="Perfmon:Process")</CODE>, every Instance value is w3wp*.<BR /> I would expect it to list 6 entries each time period, one for each of the w3wp processes.</P> <P>I can't tell whether it is averaging all w3wp processes or whether it is ignoring all the w3wp# instances (perhaps because the hashtag # is a comment symbol in config files?).</P> <P>So thoughts on that?<BR /> Also, I would like to explicitly list each w3wp process in the inputs.conf as such.</P> <P><CODE>instances = w3wp;w3wp#1;w3wp#2;w3wp#3;w3wp#4;w3wp#5;w3wp#6</CODE></P> <P>However, # is a comment symbol so how do I escape the #?</P> Wed, 24 Jan 2018 17:59:25 GMT https://community.splunk.com/t5/Getting-Data-In/Perfmon-process-elapsed-time-not-showing-individual-instances/m-p/333382#M61631 cn_jluke 2018-01-24T17:59:25Z