All Apps and Add-ons

Why is Perfmon Memory not showing up in Windows Server 2008 R2?

anzianojackson6
Explorer

I've installed the 6.3.4 forwarder on a Windows 2008 r2. It's got the Splunk Add-on for Microsoft Windows and perfmon enabled, but no perfmon memory is coming across. I'm thinking it's an OS problem. It is enabled and the forwarder has been restarted several times. It's grabbing Perfmon: PhysicalDisk/CPU/Network, etc, but no Memory.

inputs.conf

## Memory
[perfmon://Memory]
counters = *
disabled = 0
interval = 60
object = Memory
0 Karma

danielsofoulis
Path Finder

I'm having the same issue.

0 Karma

sylbaea
Communicator

Here is what I use in my environment:

[perfmon://Memory]
useEnglishOnly=true
showZeroValue = 1
instances = *
object = Memory
counters = % Committed Bytes In Use; Available MBytes; Pages Input/sec;Free System Page Table Entries;Pages/sec
interval = 60
disabled = 0

Also, if you think it is an OS problem... Have you simply try to use perfmon directly to confirm the related counters still work as expected ?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...