Has anyone come up with a solution to WMI rounding down decimal values for Windows 2003 performance monitor counters? For instance, values less than 1 are rounded down to 0.
I understand that using a local forwarder would help but I can't do that for a number of reasons.
If there's a way for you to export that data out to a flat file, Splunk could pull that in and monitor that way.
Unfortunately, that data does not go into the Windows event log to be pulled via WMI, so Splunk is unable to get it remotely.