How to find amount of RAM available using splunk enterprise?


I am trying to create an alert when 90% of RAM is used.
I have determined that Committed bytes is the amount of RAM in use but I don't know how to get total RAM.
I am NOT trying to find memory but a percentage of physical ram in use. Thanks

Tags (1)
0 Karma


Hi @kkramer2,
the real question is how do you take the information about RAM?
if you use the Splunk_TA_Windows ( ), it can extract many counters:

  • Committed Bytes,
  • Available MBytes,

in this way you can calculate the percentage of used memory on total.

In addition, in the counters there's also "% Committed Bytes In Use" that directly answers to your question.


0 Karma


I appreciate your quick response. Is Available MBytes RAM or memory ? I am trying to calculate RAM.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!