Windows splunk-netmon on Windows server 2012

[kochera]

Hi,

on our newly installed Windows servers (windows server 2012 r2) we get the following error message while starting the Splunk Universal forwarder

12-31-2013 09:58:31.630 +0100 ERROR ExecProcessor - message from ""C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe"" splunk-netmon - NetmonConfig::InitNetmonConfig: No valid stanzas found.

What I saw in the docs (http://docs.splunk.com/Documentation/Splunk/6.0.1/Data/MonitorWindowsnetworkinformation) is that this OS version is not supported. Could this be the cause for the above error?

cheers,
Andy

[wcolgate_splunk]

If you had no netmon stanza's then this "error" is erroneous -- and it has been removed; not having any stanza's is not an error case. If you have a bad stanza, this is another issue entirely.