I'm having the exact same issue.
01-07-2013 11:55:07.349 -0500 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA65-Server\bin\powershell\splunk-perfmon.ps1'" -index xenapp_perfmon" splunk-perfmon - Unable to add counter '\Process(*)\' error 0xc0000bb9
01-07-2013 11:55:07.349 -0500 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA65-Server\bin\powershell\splunk-perfmon.ps1'" -index xenapp_perfmon"
FATAL Logger - caught SEH exception while trying to log!
Also, the counters listed in perfmon.conf for TA-XA65-Server are not being collected. If I use the search app to queery "index=xenapp_perfmon", this is the only data I see ...
---splunk-perfmon-end-of-event---
... View more