Activity Feed
- Posted Re: splunk can't get wmi(wsql) query logs on windows 2008 64bit, windows 2003 64bit on Splunk Search. 11-07-2011 09:58 PM
- Posted Re: splunk can't get wmi(wsql) query logs on windows 2008 64bit, windows 2003 64bit on Splunk Search. 11-04-2011 12:35 AM
- Posted splunk can't get wmi(wsql) query logs on windows 2008 64bit, windows 2003 64bit on Splunk Search. 11-03-2011 11:05 PM
- Tagged splunk can't get wmi(wsql) query logs on windows 2008 64bit, windows 2003 64bit on Splunk Search. 11-03-2011 11:05 PM
- Tagged splunk can't get wmi(wsql) query logs on windows 2008 64bit, windows 2003 64bit on Splunk Search. 11-03-2011 11:05 PM
Topics I've Started
Subject | Karma | Author | Latest Post |
---|---|---|---|
0 |
11-07-2011
09:58 PM
Hi.
I tested new machine, Windows 2008 64bit Enterprise. (The Old machine is Window 2008 64bit Standard).
And also installed splunk, window app, and I can Window Performance Monitoring.
I Think window app can't Fully support Window Standard Ver.
... View more
11-04-2011
12:35 AM
I've installed 2 splunk server, each machines.
And i installed splunk windows app each server,
and some WMI sources can find(like WMI:LocalProcesses),
but most of WMI sources can't find, get error messages.
... View more
11-03-2011
11:05 PM
Hi All,
I have Windows 2008 64bit & Windows 2003 64bit server.
I've installed splunk 4.2.4 64bit(via administrator user) on my machines and also installed splunk windows app for monitoring my machines.
But I can't monitoring my machines via splunk
And I see "http://docs.splunk.com/Documentation/Splunk/4.2.4/Troubleshooting/TroubleshootingWMI" but it dosen't help to me.
And I can find belows splunkd.log.
So my question is
1. How Can I monitoring my machines?
2. final goal is install Universal forwarder on my machines, and monitoring. Can I?
Plz help me...
11-03-2011 11:59:16.676 +0900 ERROR ExecProcessor - message from ""C:\Program Files\Splunk\bin\splunk-wmi.exe"" WMI - Error occurred while trying to retrieve results from a WMI query (error="Specified class is not valid." HRESULT=80041010) (root\cimv2: select PagesPerSec, AvailableMBytes, CommittedBytes, PercentCommittedBytesInUse from Win32_PerfFormattedData_PerfOS_Memory)
11-03-2011 11:59:16.941 +0900 ERROR ExecProcessor - message from ""C:\Program Files\Splunk\bin\splunk-perfmon.exe" -noui" splunk-perfmon - Counter list is empty in method PeriodicDataCollector::tick
11-03-2011 11:59:16.972 +0900 ERROR ExecProcessor - message from ""C:\Program Files\Splunk\bin\splunk-wmi.exe"" WMI - Error occurred while trying to retrieve results from a WMI query (error="Specified class is not valid." HRESULT=80041010) (root\cimv2: select Name, CurrentDiskQueueLength, DiskBytesPerSec, PercentDiskReadTime, PercentDiskWriteTime, PercentDiskTime from Win32_PerfFormattedData_PerfDisk_PhysicalDisk)
11-03-2011 11:59:17.830 +0900 ERROR ExecProcessor - message from ""C:\Program Files\Splunk\bin\splunk-wmi.exe"" WMI - Error occurred while trying to retrieve results from a WMI query (error="Specified class is not valid." HRESULT=80041010) (root\cimv2: SELECT PercentProcessorTime,PercentUserTime FROM Win32_PerfFormattedData_PerfOS_Processor WHERE Name="_Total")
11-03-2011 11:59:18.735 +0900 ERROR ExecProcessor - message from ""C:\Program Files\Splunk\bin\splunk-wmi.exe"" WMI - Error occurred while trying to retrieve results from a WMI query (error="Specified class is not valid." HRESULT=80041010) (root\cimv2: SELECT Name, FreeMegabytes FROM Win32_PerfFormattedData_PerfDisk_LogicalDisk)
11-03-2011 11:59:20.389 +0900 ERROR ExecProcessor - message from ""C:\Program Files\Splunk\bin\splunk-wmi.exe"" WMI - Error occurred while trying to retrieve results from a WMI query (error="Specified class is not valid." HRESULT=80041010) (root\cimv2: select Name, BytesReceivedPerSec, BytesSentPerSec, BytesTotalPerSec, CurrentBandwidth from Win32_PerfFormattedData_Tcpip_NetworkInterface)
11-03-2011 11:59:22.089 +0900 ERROR ExecProcessor - message from ""C:\Program Files\Splunk\bin\splunk-wmi.exe"" WMI - Error occurred while trying to retrieve results from a WMI query (error="Specified class is not valid." HRESULT=80041010) (root\cimv2: select Name, CurrentDiskQueueLength, DiskBytesPerSec, PercentDiskReadTime, PercentDiskWriteTime, PercentDiskTime from Win32_PerfFormattedData_PerfDisk_PhysicalDisk)
11-03-2011 11:59:23.228 +0900 ERROR ExecProcessor - message from ""C:\Program Files\Splunk\bin\splunk-wmi.exe"" WMI - Error occurred while trying to retrieve results from a WMI query (error="Specified class is not valid." HRESULT=80041010) (root\cimv2: SELECT PercentProcessorTime,PercentUserTime FROM Win32_PerfFormattedData_PerfOS_Processor WHERE Name="_Total")
11-03-2011 11:59:23.836 +0900 ERROR ExecProcessor - message from ""C:\Program Files\Splunk\bin\splunk-wmi.exe"" WMI - Error occurred while trying to retrieve results from a WMI query (error="Specified class is not valid." HRESULT=80041010) (root\cimv2: SELECT Name, FreeMegabytes FROM Win32_PerfFormattedData_PerfDisk_LogicalDisk)
11-03-2011 11:59:25.724 +0900 ERROR ExecProcessor - message from ""C:\Program Files\Splunk\bin\splunk-wmi.exe"" WMI - Error occurred while trying to retrieve results from a WMI query (error="Specified class is not valid." HRESULT=80041010) (root\cimv2: select Name, BytesReceivedPerSec, BytesSentPerSec, BytesTotalPerSec, CurrentBandwidth from Win32_PerfFormattedData_Tcpip_NetworkInterface)
... View more