@hrawat  The email sent titled "Splunk Service Bulletin Notification" was very poorly written. It explicitly states to upgrade to one of the following versions, it doesn't say "or later". We have recently upgraded all our forwarders to be running 9.4.1, which according to the service bulletin email isn't fixed, only 9.4.0 is (was there regression, or is the email wrong?).   ... View more

The lodctr /r command seemed to have resolved the problem of not getting CPU/RAM perfmon data from one of my servers, but logical disk data is still missing. I am a little confused about the step "Now reopen the Performance Monitor and check it. You will see that the error was fixed." which Performance Monitor? The built in Windows one? I can see Logical Disk in the Windows PerfMon. That data isn't going into Splunk though. Just for background, the same UF config is working as expected on another server. Both servers are MS Server 2012 R2. ... View more