Since the first time i asked this question a few more things i have tried:
Comparing the .conf (between the working 32-bit and non working 64-bit) files for the Universal Forwarder App and for the System, all of the .conf files where changed or the same.
http://docs.splunk.com/Documentation/Splunk/latest/Data/Real-timeWindowsperformancemonitoring
Under: Configure local Windows performance monitoring with Splunk Web
The places this walktrhough point to i cannot find on my version of splunk (4.2.3)
splunkd.log is giving me :
09-26-2011 19:57:42.796 +0800 ERROR ExecProcessor - message from ""C:\Program Files (x86)\SplunkUniversalForwarder\bin\splunk-perfmon.exe" -noui" splunk-perfmon - Counter list is empty in method PeriodicDataCollector::tick
09-26-2011 19:57:42.796 +0800 ERROR ExecProcessor - message from ""C:\Program Files (x86)\SplunkUniversalForwarder\bin\splunk-perfmon.exe" -noui" splunk-perfmon - Counter list is empty in method PeriodicDataCollector::tick
09-26-2011 19:57:45.702 +0800 WARN DeploymentClient - Unable to send handshake message to deployment server. Error status is: not_connected
09-26-2011 19:57:48.286 +0800 ERROR TcpOutputProc - Can't find or illegal IP address or Name: pegasus
09-26-2011 19:57:52.749 +0800 ERROR ExecProcessor - message from ""C:\Program Files (x86)\SplunkUniversalForwarder\bin\splunk-perfmon.exe" -noui" splunk-perfmon - Counter list is empty in method PeriodicDataCollector::tick
09-26-2011 19:57:52.749 +0800 ERROR ExecProcessor - message from ""C:\Program Files (x86)\SplunkUniversalForwarder\bin\splunk-perfmon.exe" -noui" splunk-perfmon - Counter list is empty in method PeriodicDataCollector::tick
09-26-2011 19:57:52.749 +0800 ERROR ExecProcessor - message from ""C:\Program Files (x86)\SplunkUniversalForwarder\bin\splunk-perfmon.exe" -noui" splunk-perfmon - Counter list is empty in method PeriodicDataCollector::tick
09-26-2011 19:57:52.749 +0800 ERROR ExecProcessor - message from ""C:\Program Files (x86)\SplunkUniversalForwarder\bin\splunk-perfmon.exe" -noui" splunk-perfmon - Counter list is empty in method PeriodicDataCollector::tick
09-26-2011 19:57:57.703 +0800 WARN DeploymentClient - Unable to send handshake message to deployment server. Error status is: not_connected
... View more