Hi, we are trying to on board some windows perfmon counters. We can do LogicalDisk, Memory, Network Interface, PhysicalDisk, Process, Processor information, Processor, server. However we cannot pick up the following. I asked our windows admin to confirm they exist on the servers. I can't find any correct stanza definitions for each type, but below is what we are currently using (for the ones not working) APP_POOL_WAS [perfmon://APP_POOL_WAS] counters = * instances = * disabled = 0 interval = 30 mode = multikv object = * useEnglishOnly=true index = windows_perfmon ASP.NET Applications [perfmon://ASP.NET_Applications] counters = * instances = * disabled = 0 interval = 30 mode = multikv object = * useEnglishOnly=true index = windows_perfmon ASP.NET [perfmon://ASP.NET] counters = * instances = * disabled = 0 interval = 30 mode = multikv object = * useEnglishOnly=true index = windows_perfmon Cache [perfmon://Cache] counters = * instances = * disabled = 0 interval = 30 mode = multikv object = * useEnglishOnly=true index = windows_perfmon HTTP Service Request Queues [perfmon://HTTP_Service_Request_Queues] counters = * instances = * disabled = 0 interval = 30 mode = multikv object = * useEnglishOnly=true index = windows_perfmon Paging File [perfmon://Paging_File] counters = * instances = * disabled = 0 interval = 30 mode = multikv object = * useEnglishOnly=true index = windows_perfmon W3SVC_W3WP [perfmon://W3SVC_W3WP] counters = * instances = * disabled = 0 interval = 30 mode = multikv object = * useEnglishOnly=true index = windows_perfmon WAS_W3WP [perfmon://WAS_W3WP] counters = * instances = * disabled = 0 interval = 30 mode = multikv object = * useEnglishOnly=true index = windows_perfmon Web Service [perfmon://Web_Service] counters = * instances = _Total disabled = 0 interval = 30 mode = multikv object = * useEnglishOnly=true index = windows_perfmon ... View more

Hi, currently testing with this add on, and we are ingesting data successfully. But we are seeing the following errors. Has anyone seen this type of error before with this addon? Python script errors(code 255): index=_internal "code 255" ERROR pid=29779 tid=MainThread file=configuration_check.py:run:164 | status="completed" task="confcheck_script_errors" message="msg="A script exited abnormally" input="/opt/splunk/etc/apps/splunk_ta_o365/bin/splunk_ta_o365_management_activity.py" stanza="splunk_ta_o365_management_activity://Audit_AD" status="exited with code 255"" From one of the logs; /opt/splunk/var/log/splunk/splunk_ta_o365_management_activity_Audit_AD.log O365PortalError: 400:{"error":{"code":"AF20055","message":"Date range for requested content is invalid startTime:2019-01-15T12:58:57 endTime:2019-01-15T13:58:57."}} 2019-01-22 12:59:13,409 level=INFO pid=7100 tid=MainThread logger=splunksdc.collector pos=collector.py:run:248 | | message="Modular input exited." thanks ... View more