I had a completely working setup where forwarder was pushing data to UF successfully but it stopped pushing data a week earlier.
There is no error in splunkd.log which can explain the reason.
How do I fix it?
All other indexes are working fine. It's just that performance counters are not pushed. Registry values are fine.
only three foolish questions:
do you mean forwarder pushed data to another forwarder (UF) ? or forwarder sending data to indexer and now it does not send data anymore?
I mean it stopped pushing data to Splunk deployment (indexer)
Hi siddharthmis, are you using Window Perfmon stanza in the UF ?
version/OS info would help, have you tried restarting from the CLI?
Yes but in Vain