Getting Data In

How to get Windows .NET perfmon inputs working?

eckdale
Path Finder

I am attempting to enable several Windows perfmon inputs with mixed success. Inputs such as CPU, LogicalDisk, Memory, etc. all work as expected. However inputs such as .NET CLR Exceptions, .NET CLR Memory, ASP.NET, ASP.NET Applications, and Web Services don't seem to work at all.

A few more details:

  • Splunk v6.2
  • Remote system OS: Windows Server 2012 R2
  • Remote system has SplunkUniversalForwarder installed (v.6.2.1)
  • inputs.conf is being pushed by Splunk Deployment server.

Inputs.conf:

# Performance Monitoring ------------------------------------------------------
[perfmon://CPU]
disabled = false
counters = % Processor Time; % User Time;
instances = *
interval = 10
object = Processor
useEnglishOnly = true
index = perfmon-ent-wsl

[perfmon://LogicalDisk]
disabled = false
counters = % Free Space; Free Megabytes; % Disk Time; Avg. Disk sec/Read; Avg. Disk sec/Write; Avg. Disk sec/Transfer; Disk Reads/sec; Disk Writes/sec;
instances = *
interval = 10
object = LogicalDisk
useEnglishOnly = true
index = perfmon-ent-wsl

[perfmon://Memory]
disabled = false
counters = % Committed Bytes In Use; Committed Bytes; Available MBytes; Page Reads/sec, Page Writes/sec;
interval = 10
object = Memory
useEnglishOnly = true
index = perfmon-ent-wsl

[perfmon://Network]
disabled = false
counters = Bytes Received/sec; Bytes Sent/sec; Bytes Total/sec;
instances = *
interval = 10
object = Network Interface
useEnglishOnly = true
index = perfmon-ent-wsl

[perfmon://System]
disabled = false
counters = System Up Time; Processor Queue Length;
instances = *
interval = 60
object = System
useEnglishOnly = true
index = perfmon-ent-wsl

[perfmon://.NET CLR Exceptions]
disabled = false
counters = # of Exceps Thrown / sec;
instances = _Global_
interval = 10
object = .NET CLR Exceptions
useEnglishOnly = true
index = perfmon-ent-wsl

[perfmon://.NET CLR Memory]
disabled = false
counters = # Total committed Bytes;
instances = _Global_
interval = 10
object = .NET CLR Memory
useEnglishOnly = true
index = perfmon-ent-wsl

[perfmon://ASP.NET]
disabled = false
counters = Application Restarts; Request Wait Time; Requests Queued;
instances = *
interval = 10
object = ASP.NET
useEnglishOnly = true
index = perfmon-ent-wsl

[perfmon://ASP.NET Applications]
disabled = false
counters = Requests/Sec;
instances = __Total__
interval = 10
object = ASP.NET Applications
useEnglishOnly = true
index = perfmon-ent-wsl

[perfmon://Web Service]
disabled = false
counters = Get Requests/sec; Post Requests/sec; Current Connections;
instances = _Total
interval = 10
object = Web Service
useEnglishOnly = true
index = perfmon-ent-wsl
0 Karma
1 Solution

eckdale
Path Finder

Looks like the problem was caused by another application being deployed that took precedence. I'd be willing to bet this is t-shooting inputs 101 kind of stuff.

View solution in original post

0 Karma

eckdale
Path Finder

Looks like the problem was caused by another application being deployed that took precedence. I'd be willing to bet this is t-shooting inputs 101 kind of stuff.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Introducing ITSI 5.0: Unified Visibility and Actionable Insights

Introducing ITSI 5.0: Unified Visibility and Actionable Insights Tuesday, July 21, 2026  |  10:00AM PT / ...

Inside Splunk Agent Observability: Understanding Agent Behavior, Tokens & Costs

Inside Splunk Agent Observability:Understanding Agent Behavior, Tokens & Costs Thursday, August 06, ...

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...