All Apps and Add-ons

DNS Perfmon

omatsei
Explorer

I'm trying to get all the Active Directory stuff working, and almost everything is (thanks to the nice folks on here). The only part that isn't working so far is the DNS performance monitoring. For whatever reason, the eventtype "perfmon-dns" is empty. All the DNS servers are also domain controllers, so I installed the Splunk TA for Winows, and the TA for DNS Servers and Domain Controllers on each domain controller, and everything else seems to work. I can check the status of the DNS servers and all the zones have information, but the DNS perfmon is still empty. Anyone know what I can check?

jbernt_splunk
Splunk Employee
Splunk Employee

Splunk for AD v1.2 has been released and should help in this situation.

0 Karma

skylasam_splunk
Splunk Employee
Splunk Employee

Ok, that's the issue; since the TA's that the AD app uses currently doesn't support perfmon collection on 5.0.x.

We have an AD app beta v1.2.0 to fix this very issue. Please send a email request to [email protected] to participate in the AD app v1.2.0 beta and we will send you an updated package. Note, that you will have to replace the TA's that you already deployed with the ones in the beta package.

0 Karma

skylasam_splunk
Splunk Employee
Splunk Employee

What version of Splunk are you running? 5.0.x?

0 Karma

omatsei
Explorer

The newest one, 5.0.2.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...