Getting Data In

New Windows Performance Monitoring not working

Explorer

Hello,

First time posting here and I have been hitting a break wall today. I have been trying to add two new Windows Performance Monitors from a forwarder.

Here is an example of the one that is currently working.
Collection Name: Test_Processor
Index:perfmon_test
This one is working the one below is setup the same way and I have double checked both the local and remote server inputs.conf file and they are updated with what I am requesting Splunk to send back.
Here is an example of one that is not working
[perfmon://TestSystem]
disabled = 0
index = perfmon
test
instances = ;
interval = 60
object = System
counters = File Read Bytes/sec;File Read Operations/sec;File Write Bytes/sec;File Write Operations/sec;System Up Time;Processes;

I have restarted the Forwarder service and the Splunk services and still have no luck. Was wondering if anyone else has had any luck or a similar problem. Thanks for the help.

0 Karma
1 Solution

Explorer

Just wanted to update everyone the solution was to remove the empty field of instances. Thanks.

View solution in original post

0 Karma

Explorer

Just wanted to update everyone the solution was to remove the empty field of instances. Thanks.

View solution in original post

0 Karma