topic Re: How to calculate memory utilization with perfmon KPI's ? in Monitoring Splunk

How to calculate memory utilization with perfmon KPI's ?

sreelakshmi123 — Wed, 15 Mar 2017 14:28:45 GMT

Hi I want to show avg memory utilization of windows servers using Perfom KPI's. Below are the perfmon kpi's avilable

Perfmon: Memory
Perfmon:Available Memory

How do i calculate.. Please help with the query

Re: How to calculate memory utilization with perfmon KPI's ?

adonio — Wed, 15 Mar 2017 18:41:42 GMT

try that:
index = * sourcetype="Perfmon:Memory" counter="Available MBytes" | timechart avg(Value) by host
hope it helps

Re: How to calculate memory utilization with perfmon KPI's ?

akocak — Tue, 19 Mar 2019 21:36:15 GMT

Since Total Memory is a static number, you can go either the way, Below is the search, assumes you are pulling from Perfmon:

index=perfmon sourcetype=perfmon
 object="Memory"    (counter="Memory" OR counter="Available Memory")
| eval total=if(counter="Memory",Value,"NA")
| stats avg(Value) as  avgAvailable latest(total)  as total by object
| eval MemoryUtilization=round((total-avgAvailable)/total*100,1)

if memory is static value, you can put in your search as:

index=perfmon sourcetype="Perfmon" object="Memory" counter="Available Memory"
| eval total=6144
| stats avg(Value) as  avgAvailable by object
| eval MemoryUtilization=round((total-avgAvailable)/total*100,1)

please accept it as an answer if you liked it 🙂

Re: How to calculate memory utilization with perfmon KPI's ?

pvbharath — Thu, 20 Feb 2020 20:08:20 GMT

This should work, how about if we have multiple hosts and each host has static value? Kindly help. Thank you.

Aside, is there a way to find the total memory via search query itself?

Re: How to calculate memory utilization with perfmon KPI's ?

akocak — Fri, 21 Feb 2020 14:42:36 GMT

I believe answer satisfy both questions. However, feel free to explain your question further.

Re: How to calculate memory utilization with perfmon KPI's ?

pvbharath — Fri, 21 Feb 2020 16:57:04 GMT

Thanks for the response!

I see the search query is for 1 host. What should be done if I have multiple hosts which has different static memory allocated? being new to splunk I am kind of halt!

Re: How to calculate memory utilization with perfmon KPI's ?

akocak — Fri, 21 Feb 2020 22:48:32 GMT

 index=perfmon sourcetype=perfmon
  object="Memory"    (counter="Memory" OR counter="Available Memory")
 | eval total=if(counter="Memory",Value,"NA")
 | stats avg(Value) as  avgAvailable latest(total)  as total by host object
 | eval MemoryUtilization=round((total-avgAvailable)/total*100,1)

Adding host to by clause of stats should be sufficient.