Hi,
I'm trying to ingest Windows perf data into Splunk,
ingestion to event index with the following conf works fine:
[perfmon://Processor]
counters = *
disabled = 0
interval = 30
index = myeventindex
object = Processor
instances = *
formatString = %.20g
however, it doesn't work if I just change the index to metric index:
index = mymetricindex
I read the doc of metrics index : https://docs.splunk.com/Documentation/SplunkCloud/7.2.4/Metrics
looks I have to have statd/collectd/csv/hec configured in place for metrics ingestion.
wonder if it's possible to just use inputs.conf to ingest metrics? or any other workaround to avoid staging layer?
Thanks a lot!
↧