About jpewthers

jpewthers · ‎01-23-2013

I keep all the IIS web sites in the following folder: D:\inetpub\LogFiles So the tree would look like this: D:\inetpub\LogFiles |-> W3SVC1 |-> W3SVC2...etc. My input.conf is set as follows: [monitor://D:\inetpub\LogFiles] sourcetype=iis ignoreOlderThan = 14d HOWEVER...It appears that the logs are coming in and splunk is applying the following sourcetypes, seemingly at random to these IIS Log files: iis iis-2 iis-3 iis-4 Why? The logs are exactly the same. What are all of these others sourcetypes (iis- )?

jpewthers · ‎10-26-2012

You are a gentleman and a scholar. I think I have a better understanding of not only this app but Splunk as a whole.

jpewthers · ‎10-25-2012

I appreciate your response. I missed the most important line in that service-perfdata. I posted it below. ANy thoughts?

jpewthers · ‎10-24-2012

Many thanks for your response! It appears I should have put the line below. Here is all the data in the service-perfdata file. 1350598018 src_host="captain-host" perfdata="SERVICEPERFDATA" name="CPU Load" severity="OK" attempt="1" statetype="HARD" executiontime="0.309" latency="0.360" reason="OK CPU Load ok." result="5s=43%;80;90" [SERVICEPERFDATA] 1350598018 captain-host CPU Load 0.309 0.360 OK CPU Load ok. 5s=43%;80;90 I tried putting 'avg(CPU Load)' in the view, since that's what I assumed the 'name' variable was, but still no dice. Any suggestions?

jpewthers · ‎10-23-2012

I've read the other posts on here, but they are still not helping me. None of my performance charts are showing up. Let's start with CPU Load. Here is the service-perfdata raw line: [SERVICEPERFDATA] 1350596518 captain-host CPU Load 0.408 0.438 OK CPU Load ok. 5s=24%;80;90; I'm supposed to change 'avg(CpuLoad)' to something... but what? avg(CPU Load) does nothing. I've tried everything I can think of but no dice. What am I missing?

jpewthers · ‎03-30-2012

I too would like to know this answer.

Posts	6
Solutions	0
Karma Given	3
Karma Received	1
Member Since	‎03-19-2012

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Splunk and IIS Sourcetypes

Splunk Performance Graphs Not showing up.

Splunk and IIS Sourcetypes

Re: Splunk Performance Graphs Not showing up.

Re: Splunk Performance Graphs Not showing up.

Re: Splunk Performance Graphs Not showing up.

Splunk Performance Graphs Not showing up.

Re: Windows app on linux: remove warning?