Having some issues with collecting % Processor Time for processes. My inputs.conf is configured with the below stanza:
[perfmon://Process]
counters = % Processor Time; etc.
instances = *
disabled = 0
interval = 600
object = Process
sourcetype = Process
index = Test
The server has roughly 63 processes going at anytime and for most counters, I get that many instances returned when I search. However, for % Processor Time I cant seem to get back more than 18 instances. And if I bounce Splunk on the forwarder I get back a different number of instances every time.
Anyone else have this issue when trying to collect % Processor Time for Processes? Thanks!
↧