https://community.splunk.com/t5/Getting-Data-In/Direction-on-how-to-troubleshoot-this-perfmon-issue/m-p/447010#M77768 <P>You can put the inputs.conf here? </P> Wed, 14 Aug 2019 18:19:55 GMT Kawtar 2019-08-14T18:19:55Z https://community.splunk.com/t5/Getting-Data-In/Direction-on-how-to-troubleshoot-this-perfmon-issue/m-p/447009#M77767 <P>All, </P> <P>I have the stock Splunk_TA_Windows 6.0.0 installed 6.0.0 with default inputs.conf enabled. Since pushing it out I am seeing the following errors. </P> <PRE><CODE>08-14-2019 17:28:46.460 +0000 ERROR ExecProcessor - message from ""c:\Program Files\SplunkUniversalForwarder\bin\splunk-perfmon.exe"" splunk-perfmon - OutputHandler::composeOutput: Counter is not found: IO Data Bytes/sec </CODE></PRE> <P>OS is Windows 2016</P> <PRE><CODE>#inputs.conf ... ## Process [perfmon://Process] counters = % Processor Time; % User Time; % Privileged Time; Virtual Bytes Peak; Virtual Bytes; Page Faults/sec; Working Set Peak; Working Set; Page File Bytes Peak; Page File Bytes; Private Bytes; Thread Count; Priority Base; Elapsed Time; ID Process; Creating Process ID; Pool Paged Bytes; Pool Nonpaged Bytes; Handle Count; IO Read Operations/sec; IO Write Operations/sec; IO Data Operations/sec; IO Other Operations/sec; IO Read Bytes/sec; IO Write Bytes/sec; IO Data Bytes/sec; IO Other Bytes/sec; Working Set - Private disabled = 0 instances = * interval = 10 mode = single object = Process useEnglishOnly=true index=winmetrics </CODE></PRE> <P>Any idea on what might the issue be? Where I can start troubleshooting? </P> Wed, 30 Sep 2020 01:44:06 GMT https://community.splunk.com/t5/Getting-Data-In/Direction-on-how-to-troubleshoot-this-perfmon-issue/m-p/447009#M77767 daniel333 2020-09-30T01:44:06Z https://community.splunk.com/t5/Getting-Data-In/Direction-on-how-to-troubleshoot-this-perfmon-issue/m-p/447010#M77768 <P>You can put the inputs.conf here? </P> Wed, 14 Aug 2019 18:19:55 GMT https://community.splunk.com/t5/Getting-Data-In/Direction-on-how-to-troubleshoot-this-perfmon-issue/m-p/447010#M77768 Kawtar 2019-08-14T18:19:55Z https://community.splunk.com/t5/Getting-Data-In/Direction-on-how-to-troubleshoot-this-perfmon-issue/m-p/447011#M77769 <P>You can put the inputs.conf here? </P> Wed, 14 Aug 2019 18:19:59 GMT https://community.splunk.com/t5/Getting-Data-In/Direction-on-how-to-troubleshoot-this-perfmon-issue/m-p/447011#M77769 Kawtar 2019-08-14T18:19:59Z https://community.splunk.com/t5/Getting-Data-In/Direction-on-how-to-troubleshoot-this-perfmon-issue/m-p/447012#M77770 <P>This means, "IO Data Bytes" counter is not found on target host's perfmon logs. Simply remove "IO Data Bytes/sec;" from<BR /> inputs.conf for that host, and restart forwarder. </P> Tue, 07 Apr 2020 19:34:14 GMT https://community.splunk.com/t5/Getting-Data-In/Direction-on-how-to-troubleshoot-this-perfmon-issue/m-p/447012#M77770 akocak 2020-04-07T19:34:14Z