All Apps and Add-ons

Possible [perfmon://sqlserver:memory_manager] stanza typos

jwiedow
Communicator

It appears there is a typo in inputs.conf for the [perfmon://sqlserver:memory_manager] stanza in the counters line.

We are not receiving any data in Splunk for the Total Server Memory(KB) counter.

The following search will return zero results:

index=main collection="sqlserver:memory_manager" counter="Total Server Memory(KB)"

The following search will also return zero results:

index=main collection="sqlserver:memory_manager" counter="Target Server Memory(KB)"

where this will return results

index=main collection="sqlserver:memory_manager" counter="Target Server Memory (KB)"

0 Karma
1 Solution

jwiedow
Communicator

The issue is in the inputs.conf of the Splunk Add-on for Microsoft SQL Server.

The following stanza is missing a space between Memory and (KB) and has a duplicate counter value for Target Server Memory(KB).

Bad Stanza


[perfmon://sqlserver:memory_manager]
object = (SQLServer|MSSQL[^:]*):Memory Manager
counters = Total Server Memory(KB);Target Server Memory(KB);Granted Workspace Memory (KB);Maximum Workspace Memory (KB);Memory Grants Outstanding;Memory Grants Pending;Target Server Memory (KB)
interval = 60
showZeroValue = 1
disabled = 1

Corrected Stanza


[perfmon://sqlserver:memory_manager]
object = (SQLServer|MSSQL[^:]*):Memory Manager
counters = Total Server Memory (KB);Granted Workspace Memory (KB);Maximum Workspace Memory (KB);Memory Grants Outstanding;Memory Grants Pending;Target Server Memory (KB)
interval = 60
showZeroValue = 1
disabled = 1

View solution in original post

0 Karma

jwiedow
Communicator

The issue is in the inputs.conf of the Splunk Add-on for Microsoft SQL Server.

The following stanza is missing a space between Memory and (KB) and has a duplicate counter value for Target Server Memory(KB).

Bad Stanza


[perfmon://sqlserver:memory_manager]
object = (SQLServer|MSSQL[^:]*):Memory Manager
counters = Total Server Memory(KB);Target Server Memory(KB);Granted Workspace Memory (KB);Maximum Workspace Memory (KB);Memory Grants Outstanding;Memory Grants Pending;Target Server Memory (KB)
interval = 60
showZeroValue = 1
disabled = 1

Corrected Stanza


[perfmon://sqlserver:memory_manager]
object = (SQLServer|MSSQL[^:]*):Memory Manager
counters = Total Server Memory (KB);Granted Workspace Memory (KB);Maximum Workspace Memory (KB);Memory Grants Outstanding;Memory Grants Pending;Target Server Memory (KB)
interval = 60
showZeroValue = 1
disabled = 1

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...