Here's a great blog post on achieving this: https://www.octamis.com/octamis-blog/windows-performance-monitoring-tips-with-splunk/
create a KVstore based lookup table to store our Windows configuration inventory data
schedule a report to update the lookup table on a regular basis (per day basis for example)
create an auto lookup configuration such that it is not necessary to perform the lookup command manually
... View more