Hi,
dealing with the same issue right now.
I've added this to the inputs.conf in directory of the Universal Forwarder. C:\Program Files\SplunkUniversalForwarder\etc\apps\MSICreated\local
[perfmon://LocalPhysicalDisk]
interval = 30
object = PhysicalDisk
counters = Disk Bytes/sec; % Disk Read Time; % Disk Write Time; % Disk Time
instances = *
disabled = 0
index = main
[perfmon://LocalMainMemory]
interval = 30
object = Memory
counters = Committed Bytes; Available Bytes; % Committed Bytes In Use
disabled = 0
index = main
[perfmon://Processor]
interval = 60
object = Processor
counters = % Processor Time
instances = _Total
disabled = 0
index = main
kind of works, still playing around
Jiri
... View more