All Apps and Add-ons

Possible [perfmon://sqlserver:memory_manager] stanza typos

jwiedow
Communicator

It appears there is a typo in inputs.conf for the [perfmon://sqlserver:memory_manager] stanza in the counters line.

We are not receiving any data in Splunk for the Total Server Memory(KB) counter.

The following search will return zero results:

index=main collection="sqlserver:memory_manager" counter="Total Server Memory(KB)"

The following search will also return zero results:

index=main collection="sqlserver:memory_manager" counter="Target Server Memory(KB)"

where this will return results

index=main collection="sqlserver:memory_manager" counter="Target Server Memory (KB)"

0 Karma
1 Solution

jwiedow
Communicator

The issue is in the inputs.conf of the Splunk Add-on for Microsoft SQL Server.

The following stanza is missing a space between Memory and (KB) and has a duplicate counter value for Target Server Memory(KB).

Bad Stanza


[perfmon://sqlserver:memory_manager]
object = (SQLServer|MSSQL[^:]*):Memory Manager
counters = Total Server Memory(KB);Target Server Memory(KB);Granted Workspace Memory (KB);Maximum Workspace Memory (KB);Memory Grants Outstanding;Memory Grants Pending;Target Server Memory (KB)
interval = 60
showZeroValue = 1
disabled = 1

Corrected Stanza


[perfmon://sqlserver:memory_manager]
object = (SQLServer|MSSQL[^:]*):Memory Manager
counters = Total Server Memory (KB);Granted Workspace Memory (KB);Maximum Workspace Memory (KB);Memory Grants Outstanding;Memory Grants Pending;Target Server Memory (KB)
interval = 60
showZeroValue = 1
disabled = 1

View solution in original post

0 Karma

jwiedow
Communicator

The issue is in the inputs.conf of the Splunk Add-on for Microsoft SQL Server.

The following stanza is missing a space between Memory and (KB) and has a duplicate counter value for Target Server Memory(KB).

Bad Stanza


[perfmon://sqlserver:memory_manager]
object = (SQLServer|MSSQL[^:]*):Memory Manager
counters = Total Server Memory(KB);Target Server Memory(KB);Granted Workspace Memory (KB);Maximum Workspace Memory (KB);Memory Grants Outstanding;Memory Grants Pending;Target Server Memory (KB)
interval = 60
showZeroValue = 1
disabled = 1

Corrected Stanza


[perfmon://sqlserver:memory_manager]
object = (SQLServer|MSSQL[^:]*):Memory Manager
counters = Total Server Memory (KB);Granted Workspace Memory (KB);Maximum Workspace Memory (KB);Memory Grants Outstanding;Memory Grants Pending;Target Server Memory (KB)
interval = 60
showZeroValue = 1
disabled = 1

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...