Hi Adonio, thank you for your feedback.
I think this is a bug on perfmon network ingestion... Trying to ingest Windows Perfmon Network Data we realized the ingestion just don’t work, even after following all required configuration steps. The most strange was that network ingestion is the only one which is not working. Others like memory, CPU and disk are working regularly.
After some exhaustive tests, we identified the problem: When a host is deployed on a server class, which has Network Perfmon app activated, Splunk creates a new entry at inputs.conf file referencing the following content:
Object = Network
We noticed that the correct object at inputs.conf in order to have the ingestion working should be:
Object = Network Interface
It is not feasible to perform the adjust at all inputs.conf manually, because we know it was not going to work, since the inputs.conf file is wrongly re-created every time a host is added to a server class.
... View more