https://community.splunk.com/t5/Getting-Data-In/WMI-data-index-question/m-p/40718#M7548 <P>Hi I want to investigate about not responding application. 20 PC has this application installed but only 3 or 4 of them got blocking every night at 4:00 am. <BR /> No logs are generated, so I want to use WMI, but what counters I have to index? <BR /> Thanks in advance!</P> Mon, 11 Jul 2011 12:41:14 GMT dbarbon 2011-07-11T12:41:14Z https://community.splunk.com/t5/Getting-Data-In/WMI-data-index-question/m-p/40718#M7548 <P>Hi I want to investigate about not responding application. 20 PC has this application installed but only 3 or 4 of them got blocking every night at 4:00 am. <BR /> No logs are generated, so I want to use WMI, but what counters I have to index? <BR /> Thanks in advance!</P> Mon, 11 Jul 2011 12:41:14 GMT https://community.splunk.com/t5/Getting-Data-In/WMI-data-index-question/m-p/40718#M7548 dbarbon 2011-07-11T12:41:14Z https://community.splunk.com/t5/Getting-Data-In/WMI-data-index-question/m-p/40719#M7549 <P>I think it depends on what actually you want. I would start with standard windows application log and maybe processes info (<CODE>wql = SELECT * FROM Win32_PerfFormattedData_PerfProc_Process WHERE Name LIKE "YourApplicationName%"</CODE>)</P> Mon, 11 Jul 2011 12:56:32 GMT https://community.splunk.com/t5/Getting-Data-In/WMI-data-index-question/m-p/40719#M7549 Vladimir 2011-07-11T12:56:32Z https://community.splunk.com/t5/Getting-Data-In/WMI-data-index-question/m-p/40720#M7550 <P>Vladimir, thanks for your response. <BR /> Now I have to implement Splunk on the customer network and start searching!</P> Mon, 11 Jul 2011 14:28:10 GMT https://community.splunk.com/t5/Getting-Data-In/WMI-data-index-question/m-p/40720#M7550 dbarbon 2011-07-11T14:28:10Z