Getting Data In

Specify WMI input index?

Jason
Motivator

It looks like I can enable WMI via wmi.conf, but wmi.conf.spec doesn't list index= as a valid parameter for a WMI input.

Where can I specify what index WMIs get put in - the stanza for whatever script runs to get the WMI?

Tags (2)
0 Karma
1 Solution

Jason
Motivator

You have to change the index at the level of the script that collects WMI:

in inputs.conf:

[script://$SPLUNK_HOME\bin\scripts\splunk-wmi.path]
index = os

View solution in original post

the_wolverine
Champion

Looks like in version 5+ you can set the index in wmi.conf file.

0 Karma

Jason
Motivator

You have to change the index at the level of the script that collects WMI:

in inputs.conf:

[script://$SPLUNK_HOME\bin\scripts\splunk-wmi.path]
index = os
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...