cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
Nicc2013
Engager
Member since: ‎02-11-2013
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 2
Karma Received 0
Member Since ‎02-11-2013
View All

Re: Splunk XenDesktop AddOn - Perfmon data does n...

by in All Apps and Add-ons
‎03-04-2013 01:40 AM
‎03-04-2013 01:40 AM
Thanks... Addtionally it shows that it did not work with this configuration only, because we were running with local language mui pack in our Windows 7. As soon as I forced the splunkforwarder service to run under an account that were hit by a english language pack, it start working. The perfmon objects and counters did not match the english names, so splunkd log and splunk-perfmon.exe reported that it could not locate the objects 🙂 Furthermore the perfmon entries were case sensitive (Do not use PERFMON://) only small letters 🙂 ... View more

Splunk XenDesktop AddOn - Perfmon data does not g...

by in All Apps and Add-ons
‎02-28-2013 05:12 AM
‎02-28-2013 05:12 AM
I am running Splunk 5.0.2 and Splunk for XenDesktop App v. 2.0 (Both currently the newest versions) Splunk Universal Forwarder 5.0.2 incl. XD AddOns is installed onto a Windows 7 x64 XenDesktop VDI. I am getting VDI/XenDesktop data and eventlogs perfectly fine in my indexer, but perfmon data do not show under "Desktop Performance", and the index; XenDesktop_Perfmon does not receive any data. Anybody with same issue and/or knows how to ensure perfmon data gets forwarded to the splunk xendesktop indexer? Splunkd log is showing no error in regards to splunk-perfmon.exe; 3:56:42.383 +0100 INFO ExecProcessor - New scheduled exec process: "C:\Program Files\SplunkUniversalForwarder\bin\splunk-perfmon.exe" -index xendesktop_perfmon 02-28-2013 13:56:42.383 +0100 INFO ExecProcessor - interval: 60000 ms 02-28-2013 13:56:42.383 +0100 INFO ExecProcessor - New scheduled exec process: "C:\Program Files\SplunkUniversalForwarder\bin\splunk-regmon.exe" --driver-path "C:\Program Files\SplunkUniversalForwarder\bin" 02-28-2013 13:56:42.383 +0100 INFO ExecProcessor - interval: 10000000000 ms 02-28-2013 13:56:42.383 +0100 INFO ExecProcessor - New scheduled exec process: "C:\Program Files\SplunkUniversalForwarder\bin\splunk-wmi.exe" -index xendesktop_winevents 02-28-2013 13:56:42.383 +0100 INFO ExecProcessor - interval: 10000000000 ms 02-28-2013 13:56:42.383 +0100 INFO ExecProcessor - New scheduled exec process: "C:\Program Files\SplunkUniversalForwarder\bin\splunk-perfmon.exe" 02-28-2013 13:56:42.383 +0100 INFO ExecProcessor - interval: run once 02-28-2013 13:56:42.383 +0100 INFO ExecProcessor - New scheduled exec process: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XD-VDA\bin\powershell\GetClientDetails.ps1'" -index xendesktop 02-28-2013 13:56:42.383 +0100 INFO ExecProcessor - interval: 180000 ms 02-28-2013 13:56:42.383 +0100 INFO ExecProcessor - New scheduled exec process: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XD-VDA\bin\powershell\GetICASessionStat.ps1'" -index xendesktop 02-28-2013 13:56:42.383 +0100 INFO ExecProcessor - interval: 180000 ms 02-28-2013 13:56:42.383 +0100 INFO ExecProcessor - New scheduled exec process: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XD-VDA\bin\powershell\GetInstalledSoftware.ps1'" -index xendesktop_winevents 02-28-2013 13:56:42.383 +0100 INFO ExecProcessor - interval: 21600000 ms 02-28-2013 13:56:42.383 +0100 INFO ExecProcessor - New scheduled exec process: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XD-VDA\bin\powershell\GetProcess.ps1'" -index xendesktop_winevents Thanks ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM
Karma given to
View All