[PERFMON:PhysicalDisk]
interval = 15
object = PhysicalDisk
counters = Disk Writes/sec; Disk Reads/sec; % Disk Read Time; % Disk Write Time; % Disk Time
disabled = 0
instances = "1 D:"
index = perfmon_disk
when I have instances = * it works just fine but I want just the D drive.
What is below is what i get from the splunk interface.
(instance="1 D:")
I only want the perf data from a single drive IE the D-drive not all drives and not the total.
What's the question?