diff --git a/deployment-apps/Splunk_TA_windows_dc/default/transforms.conf b/deployment-apps/Splunk_TA_windows_dc/default/transforms.conf index 94caa541..55cca461 100644 --- a/deployment-apps/Splunk_TA_windows_dc/default/transforms.conf +++ b/deployment-apps/Splunk_TA_windows_dc/default/transforms.conf @@ -1169,8 +1169,13 @@ REGEX = Value=\"?([^\"\r\n]*[^\"\s]) FORMAT = _value::$1 WRITE_META = true +##[metric_name_for_perfmon_metrics_store] +##REGEX = counter=\"?([^\"\r\n]*[^\"\s]) +##FORMAT = metric_name::$1 +##WRITE_META = true + [metric_name_for_perfmon_metrics_store] -REGEX = counter=\"?([^\"\r\n]*[^\"\s]) +REGEX = counter=\"?([^\"\r\n]*%_Committed Bytes In Use[^\"\r\n]*[^\"\s]) FORMAT = metric_name::$1 WRITE_META = true