Hi,
While checking the introspection index, the search index=_introspection | dedup component | table component
returns below results, but 'PerProcess' is missing. Any idea?
Hostwide
KVStoreServerStats
KVStoreCollectionStats
KVStoreReplicaSetStats
IOStats
Partitions
Fishbucket
Indexes
Volumes
Dispatch
Summaries
Hi - sorry for the delay here. I think my understanding is that you're talking about a Windows Universal Forwarder, and you don't see the PerProcess component in the _introspection index. I checked a Windows forwarder in my lab (6.4.3, Windows 7 64 bit) and sure enough, even though the introspection app was enabled, I did NOT see PerProcess.
I did get this working, and here's what I did:
A few minutes later, I had this, where I did not have that component ever before:
Try something like that and let us know? By the way, this is documented here:
Do you get any results by searching:
index=_introspection "PerProcess"
And what timeframe are you searching (though I doubt that's the issue)?