Getting Data In

Can I injest CPU, memory,eventID data in metric index by using SPLUNK app for unix and linux ?

kate
Path Finder

Can I injest CPU, memory,eventID data in metric index by using SPLUNK app for Windows ?
I am getting data once I injest this data in event index but when I am changing the index to metric index the data stops coming to any index.

#splunkforwarder#splunkappforwindows


Labels (4)
0 Karma
1 Solution

kate
Path Finder

Thanks for the hint I was checking via index=metric_indexname query. Utilized mstat it started fetching data.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

I presume you're referring to the Splunk Add-on for Windows since the app does not have any inputs.

It's not enough to change the destination index to a metrics index.  The format of the data must also change.

See https://docs.splunk.com/Documentation/AddOns/released/Windows/Configuration#Collect_perfmon_data_and... for the list of Windows metrics that are available and how to enable them.

---
If this reply helps you, Karma would be appreciated.
0 Karma

kate
Path Finder

Thanks for your response @richgalloway 
I have performed changes as suggested in the link you provided. And have restarted the splunk UF too. 
Still facing the same issue and have no error in splunkd.log.


kate_0-1708011963118.png

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Verify the index name specified in inputs.conf on the UF exists on the indexers.

Please share the query you're using to find the data.

---
If this reply helps you, Karma would be appreciated.
0 Karma

kate
Path Finder

Thanks for the hint I was checking via index=metric_indexname query. Utilized mstat it started fetching data.

Get Updates on the Splunk Community!

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...

Splunk New Course Releases for a Changing World

Every day, the world feels like it’s moving faster with new technological breakthroughs, AI innovation, and ...

Insights from .conf 2025, Smart Edge Processor Scaling, and a New Splunk Lantern ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...