Thanks so much for the fast reply. Right now I am just copying some nmon data over to a single instance and monitoring the path. We are not using the shell script to actually collect the data locally on forwarders.
The first two searches you suggested both returned 0 results. I looked in the nmon data file itself and found the following line with ZZZZ in it:
ZZZZ,T0003,00:11:12,21-JUL-2014
... View more