Getting Data In

How can we determine the overall percentage of memory utilization on a Windows server?

tangtangtang12
Loves-to-Learn Lots

I've read through some of the Splunk documentation and previously one of my colleagues already configured the "Windows server health" content pack, but when I check the "OS:Performance.WIN.Memory" I only see 4 metrics and cannot get the overall % memory utilization because I do not have the total amount to begin with.

These are the only metrics I have:

Available_MBytes

Cache_Bytes

Page_Reads/sec


Install and configure the Content Pack for Monitoring Microsoft Windows - Splunk Documentation

Labels (5)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @tangtangtang12 

I presume you are using ITSI/ITEW which is where you have installed the content pack?

The content pack is only KPIs and relies on specific data to be available - The content pack itself does not onboard the data.

Please check out the docs around the content pack data requirements here: https://docs.splunk.com/Documentation/CPWindowsMon/latest/CP/DataReqs

That docs page gives an inputs.conf sample and other info about the data required for these KPIs to run, including the metrics you are looking for.

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @tangtangtang12 ,

whichAdd-On are you using to extract these information from your windows server?

is you use the Splunk_TA_Window ( https://splunkbase.splunk.com/app/742 ) there's two inputs (disabled by default and to enable) that you can use:

  • [WinHostMon://Computer]
  • [perfmon://Memory]
    • Page Faults/sec;
    • Available Bytes;
    • Committed Bytes;
    • Commit Limit;
    • Write Copies/sec;
    • Transition Faults/sec;
    • Cache Faults/sec;
    • Demand Zero Faults/sec;
    • Pages/sec;
    • Pages Input/sec;
    • Page Reads/sec;
    • Pages Output/sec;
    • Pool Paged Bytes;
    • Pool Nonpaged Bytes;
    • Page Writes/sec;
    • Pool Paged Allocs;
    • Pool Nonpaged Allocs;
    • Free System Page Table Entries;
    • Cache Bytes;
    • Cache Bytes Peak;
    • Pool Paged Resident Bytes;
    • System Code Total Bytes;
    • System Code Resident Bytes;
    • System Driver Total Bytes;
    • System Driver Resident Bytes;
    • System Cache Resident Bytes;
    • % Committed Bytes In Use;
    • Available KBytes;
    • Available MBytes;
    • Transition Pages RePurposed/sec;
    • Free & Zero Page List Bytes;
    • Modified Page List Bytes;
    • Standby Cache Reserve Bytes;
    • Standby Cache Normal Priority Bytes;
    • Standby Cache Core Bytes;
    • Long-Term Average Standby Cache Lifetime (s)

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Fall Into Learning with New Splunk Education Courses

Every month, Splunk Education releases new courses to help you branch out, strengthen your data science roots, ...

Super Optimize your Splunk Stats Searches: Unlocking the Power of tstats, TERM, and ...

By Martin Hettervik, Senior Consultant and Team Leader at Accelerate at Iver, Splunk MVPThe stats command is ...

How Splunk Observability Cloud Prevented a Major Payment Crisis in Minutes

Your bank's payment processing system is humming along during a busy afternoon, handling millions in hourly ...