Getting Data In

I'm able to gather Memory and CPU information, but why am I not seeing any LogicalDisk perfmon data using a Universal Forwarder?

ragedsparrow
SplunkTrust
SplunkTrust

Greetings,

I have been building a perfmon solution for a POC that my company is about to undergo with regards to some light endpoint monitoring. We are wanting to look at several things, including CPU, Memory and Disk statistics and monitoring. Now, I have been able to, on my test machine utilizing a Universal Forwarder on version 6.1.4, gather the Memory and CPU perfmon information. However, I am not seeing anything for my LogicalDisk perfmon object. Here is the stanza in inputs.conf:

[perfmon://FreeDiskSpace]
counters = *
instances = *
interval = 10
object = LogicalDisk
disabled = false

I have the interval set to 10 so that it runs and sends some data. Any suggestion is helpful. Thank you.

0 Karma
1 Solution

ragedsparrow
SplunkTrust
SplunkTrust

I was able to get this figured out. I am actually forwarding Perfmon data to an indexer, and what I forgot to do for this one was specify the index. I was able to get it to work with this:

[perfmon://FreeDiskSpace]
 counters = *
 instances = *
 interval = 10
 object = LogicalDisk
 disabled = false
 index = perfmon

View solution in original post

ragedsparrow
SplunkTrust
SplunkTrust

I was able to get this figured out. I am actually forwarding Perfmon data to an indexer, and what I forgot to do for this one was specify the index. I was able to get it to work with this:

[perfmon://FreeDiskSpace]
 counters = *
 instances = *
 interval = 10
 object = LogicalDisk
 disabled = false
 index = perfmon
Get Updates on the Splunk Community!

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...