Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Admin Other
- :
- Knowledge Management
- :
- Do we need to enable counter in client sytem to co...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi all,
Do we need to enable counter in client sytem to collect in the splunk server?
Thanks
Sathish R
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you want to collect data from the counters, you will need to enable them on the machine you're running IIS on. Then the forwarder can index using the perfmon input: http://docs.splunk.com/Documentation/Splunk/6.2.0/Data/Real-timeWindowsperformancemonitoring#Configu...
If you only want client connections you could index the access log files (w3c format) with a monitor input instead.
See this previous question as well: http://answers.splunk.com/answers/187236/is-there-a-way-to-see-current-connections-on-iis-s.html
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you want to collect data from the counters, you will need to enable them on the machine you're running IIS on. Then the forwarder can index using the perfmon input: http://docs.splunk.com/Documentation/Splunk/6.2.0/Data/Real-timeWindowsperformancemonitoring#Configu...
If you only want client connections you could index the access log files (w3c format) with a monitor input instead.
See this previous question as well: http://answers.splunk.com/answers/187236/is-there-a-way-to-see-current-connections-on-iis-s.html
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you laserval,
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Please clarify a bit:
- Is this on Windows?
- What kind of data are you trying to collect?
- Do you have a Splunk Universal Forwarder installed on the client system?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
1) Yes it is window
2) IIS (Current Connections, Maximum Connections Total Connection Attempts )
3) yep we have installd Splunk Universal Forwarder client system.
Accelerating Observability as Code with the Splunk AI Assistant
Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...
Congratulations to the 2025-2026 SplunkTrust!
