PdhCollectQueryData failed ?

[piebob]

on behalf of omlojoha from the forums:

In the splunkd.log I see the following message:

06-11-2010 16:30:54.424 ERROR ExecProcessor - message from "D:\applic\Splunk\bin\splunk-perfmon.exe -noui" ERROR splunk-perfmon - runPerfMon: PdhCollectQueryData failed with status (0x800007d5): No data to return.

Does someone know what this means and how I can solve this?

My platform is a 2003 SP2 server (VMWare).

Thanks in advance!

[dart · Accepted solution]

According to msdn the PDH_NO_DATA status code means: The query does not currently contain any counters. The query may not contain data because the user is not running with an elevated token

Is the user Splunk is running as a member of the Performance Logs User Group or Administrators?

[piebob]

i'm not going to be able to find out, this question was asked on behalf of another user. but thank you 🙂