...ut of the box that Splunk would allow me collect Windows perfmon data straight toametricsindex. I think from reading the guide here that the pattern is as follows:
Configure the forwarder i...
...nline with the data? Is there an example somewhere?
Also I would like to know which configuration should be applied to the universal forwarder to monitor this file and send the data to the metricindex...
In Splunk 7.0.0, when sending data toametricsindex, it looks like one can send duplicate metric measurement events (e.g., the same tuple of time, metric name, and dimensions) and the metricindex...
Hello,
We're running into an issue with a UF sending data toa new metricsindex under an app deployed by our deployment server. None of the perfmon inputs are sending data into our new index, a...
I would like to collect my windows perfmon data into ametricsindex. Is this feature planned for the near future?
The reason: I've had very good experience with the new metricsindex. Great p...
...oo metricName=num_bytes_received | timechart span=1d sum(value) by key
My goals are 1) to display both of these metrics on the same chart and then 2) toalert when the send & receive totals f...
I have created a setup where from an input based on a regex some of the events are sent toa specific index with changed source type. It is working nicely with regular indexes, but I can not get it w...
...y duplicate setup in another enviornment that IS working.
No errors in metrics.log on the UF either.
On the Indexer is this warning:
WARN DateParserVerbose - Failed to parse timestamp. D...
I had a little test environment set up to test forwarding toa test indexer and it worked fine. Now, I altered the files tosend data to our production indexers, and although the forwarder appears to...
...nformation (eg wineventlogs, secure, auth logs) needs to be sent toindexer1_group && the perfmon/metrics/application dataset etc, needs to be sent toindexer2_group. So not data cloning but specific d...