The splunk-perfmon.exe process exits soon after start with no error being logged wither in the splunkd.log or in the windows event log.
There is error message in the event viewer:
Perflib 1008 error
(perfmon doesn’t open)
1) Open a CMD via run as admin
2) Rebuild performance counters, run commands:
C:\Windows\system32\lodctr.exe /R
C:\Windows\SysWOW64\lodctr.exe /R
3) Now re-register the computer´s performance libraries with the following:
C:\Windows\System32\wbem\winmgmt.exe /RESYNCPERF
C:\Windows\SysWOW64\wbem\winmgmt.exe /RESYNCPERF
After perform this, the repair the perfmon metrics are now coming in.
1) Open a CMD via run as admin
2) Rebuild performance counters, run commands:
C:\Windows\system32\lodctr.exe /R
C:\Windows\SysWOW64\lodctr.exe /R
3) Now re-register the computer´s performance libraries with the following:
C:\Windows\System32\wbem\winmgmt.exe /RESYNCPERF
C:\Windows\SysWOW64\wbem\winmgmt.exe /RESYNCPERF
After perform this, the repair the perfmon metrics are now coming in.