From 99867b0f742624263dd2daac18010f16e460a7ec Mon Sep 17 00:00:00 2001 From: admingit Date: Fri, 23 Feb 2024 13:31:46 +0100 Subject: [PATCH] update regex --- .../Splunk_TA_windows_dc/default/transforms.conf | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/deployment-apps/Splunk_TA_windows_dc/default/transforms.conf b/deployment-apps/Splunk_TA_windows_dc/default/transforms.conf index 94caa541..55cca461 100644 --- a/deployment-apps/Splunk_TA_windows_dc/default/transforms.conf +++ b/deployment-apps/Splunk_TA_windows_dc/default/transforms.conf @@ -1169,8 +1169,13 @@ REGEX = Value=\"?([^\"\r\n]*[^\"\s]) FORMAT = _value::$1 WRITE_META = true +##[metric_name_for_perfmon_metrics_store] +##REGEX = counter=\"?([^\"\r\n]*[^\"\s]) +##FORMAT = metric_name::$1 +##WRITE_META = true + [metric_name_for_perfmon_metrics_store] -REGEX = counter=\"?([^\"\r\n]*[^\"\s]) +REGEX = counter=\"?([^\"\r\n]*%_Committed Bytes In Use[^\"\r\n]*[^\"\s]) FORMAT = metric_name::$1 WRITE_META = true