All Apps and Add-ons

DNS Perfmon

omatsei
Explorer

I'm trying to get all the Active Directory stuff working, and almost everything is (thanks to the nice folks on here). The only part that isn't working so far is the DNS performance monitoring. For whatever reason, the eventtype "perfmon-dns" is empty. All the DNS servers are also domain controllers, so I installed the Splunk TA for Winows, and the TA for DNS Servers and Domain Controllers on each domain controller, and everything else seems to work. I can check the status of the DNS servers and all the zones have information, but the DNS perfmon is still empty. Anyone know what I can check?

jbernt_splunk
Splunk Employee
Splunk Employee

Splunk for AD v1.2 has been released and should help in this situation.

0 Karma

skylasam_splunk
Splunk Employee
Splunk Employee

Ok, that's the issue; since the TA's that the AD app uses currently doesn't support perfmon collection on 5.0.x.

We have an AD app beta v1.2.0 to fix this very issue. Please send a email request to microsoft@splunk.com to participate in the AD app v1.2.0 beta and we will send you an updated package. Note, that you will have to replace the TA's that you already deployed with the ones in the beta package.

0 Karma

skylasam_splunk
Splunk Employee
Splunk Employee

What version of Splunk are you running? 5.0.x?

0 Karma

omatsei
Explorer

The newest one, 5.0.2.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Build the Future of Agentic AI: Join the Splunk Agentic Ops Hackathon

AI is changing how teams investigate incidents, detect threats, automate workflows, and build intelligent ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...