Do we need to enable counter in client sytem to collect in the splunk server?

[rsathish47]

Hi all,

Do we need to enable counter in client sytem to collect in the splunk server?

Thanks
Sathish R

[laserval · Accepted solution]

If you want to collect data from the counters, you will need to enable them on the machine you're running IIS on. Then the forwarder can index using the perfmon input: http://docs.splunk.com/Documentation/Splunk/6.2.0/Data/Real-timeWindowsperformancemonitoring#Configu...

If you only want client connections you could index the access log files (w3c format) with a monitor input instead.

See this previous question as well: http://answers.splunk.com/answers/187236/is-there-a-way-to-see-current-connections-on-iis-s.html

[rsathish47]

Thank you laserval,

[laserval]

Please clarify a bit:

• Is this on Windows?
• What kind of data are you trying to collect?
• Do you have a Splunk Universal Forwarder installed on the client system?

[rsathish47]

1) Yes it is window
2) IIS (Current Connections, Maximum Connections Total Connection Attempts )
3) yep we have installd Splunk Universal Forwarder client system.