How do I add additional performance counters to the Splunk UF Collector?

MTravisVolker — Fri, 20 Dec 2019 19:47:59 GMT

We are attempting to add Microsoft RAS Total counters from PerfMon to the Splunk UF collector. We updated the local/inputs.conf as follows.

These counters are available on the host but they aren't being collected by Splunk.

Re: How do I add additional performance counters to the Splunk UF Collector?

jgibby — Thu, 09 Jan 2020 00:18:12 GMT

I found this useful:

instead of asterisk, you'd have to use dot-asterisk or be explicit with the object, example:

object = RAS Total