Getting Data In

How can we determine the overall percentage of memory utilization on a Windows server?

tangtangtang12
Loves-to-Learn Lots

I've read through some of the Splunk documentation and previously one of my colleagues already configured the "Windows server health" content pack, but when I check the "OS:Performance.WIN.Memory" I only see 4 metrics and cannot get the overall % memory utilization because I do not have the total amount to begin with.

These are the only metrics I have:

Available_MBytes

Cache_Bytes

Page_Reads/sec


Install and configure the Content Pack for Monitoring Microsoft Windows - Splunk Documentation

Labels (5)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @tangtangtang12 

I presume you are using ITSI/ITEW which is where you have installed the content pack?

The content pack is only KPIs and relies on specific data to be available - The content pack itself does not onboard the data.

Please check out the docs around the content pack data requirements here: https://docs.splunk.com/Documentation/CPWindowsMon/latest/CP/DataReqs

That docs page gives an inputs.conf sample and other info about the data required for these KPIs to run, including the metrics you are looking for.

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @tangtangtang12 ,

whichAdd-On are you using to extract these information from your windows server?

is you use the Splunk_TA_Window ( https://splunkbase.splunk.com/app/742 ) there's two inputs (disabled by default and to enable) that you can use:

  • [WinHostMon://Computer]
  • [perfmon://Memory]
    • Page Faults/sec;
    • Available Bytes;
    • Committed Bytes;
    • Commit Limit;
    • Write Copies/sec;
    • Transition Faults/sec;
    • Cache Faults/sec;
    • Demand Zero Faults/sec;
    • Pages/sec;
    • Pages Input/sec;
    • Page Reads/sec;
    • Pages Output/sec;
    • Pool Paged Bytes;
    • Pool Nonpaged Bytes;
    • Page Writes/sec;
    • Pool Paged Allocs;
    • Pool Nonpaged Allocs;
    • Free System Page Table Entries;
    • Cache Bytes;
    • Cache Bytes Peak;
    • Pool Paged Resident Bytes;
    • System Code Total Bytes;
    • System Code Resident Bytes;
    • System Driver Total Bytes;
    • System Driver Resident Bytes;
    • System Cache Resident Bytes;
    • % Committed Bytes In Use;
    • Available KBytes;
    • Available MBytes;
    • Transition Pages RePurposed/sec;
    • Free & Zero Page List Bytes;
    • Modified Page List Bytes;
    • Standby Cache Reserve Bytes;
    • Standby Cache Normal Priority Bytes;
    • Standby Cache Core Bytes;
    • Long-Term Average Standby Cache Lifetime (s)

Ciao.

Giuseppe

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...