Hi, I you are still looking for a solution for NMON within Splunk, take a look at NMON for Splunk App i've just released:
A Host
IOADAPT,T0010,0.0,2.0,0.5,0.0,52.6,8.9,0.0,49.4,8.5
B Host
IOADAPT,T0287,31.6,111.8,25.3
C Host
IOADAPT,T0001,0.0,0.0,0.0,1438.2,1238.4,241.2
Need to extract the location data, the start of each host field is not the same, not the same length of the field, how to solve this problem?