Getting Data In

Specify WMI input index?

Jason
Motivator

It looks like I can enable WMI via wmi.conf, but wmi.conf.spec doesn't list index= as a valid parameter for a WMI input.

Where can I specify what index WMIs get put in - the stanza for whatever script runs to get the WMI?

Tags (2)
0 Karma
1 Solution

Jason
Motivator

You have to change the index at the level of the script that collects WMI:

in inputs.conf:

[script://$SPLUNK_HOME\bin\scripts\splunk-wmi.path]
index = os

View solution in original post

the_wolverine
Champion

Looks like in version 5+ you can set the index in wmi.conf file.

0 Karma

Jason
Motivator

You have to change the index at the level of the script that collects WMI:

in inputs.conf:

[script://$SPLUNK_HOME\bin\scripts\splunk-wmi.path]
index = os
Get Updates on the Splunk Community!

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...

From GPU to Application: Monitoring Cisco AI Infrastructure with Splunk Observability ...

AI workloads are different. They demand specialized infrastructure—powerful GPUs, enterprise-grade networking, ...

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...