Getting Data In

How can we determine the overall percentage of memory utilization on a Windows server?

tangtangtang12
Loves-to-Learn Lots

I've read through some of the Splunk documentation and previously one of my colleagues already configured the "Windows server health" content pack, but when I check the "OS:Performance.WIN.Memory" I only see 4 metrics and cannot get the overall % memory utilization because I do not have the total amount to begin with.

These are the only metrics I have:

Available_MBytes

Cache_Bytes

Page_Reads/sec


Install and configure the Content Pack for Monitoring Microsoft Windows - Splunk Documentation

Labels (5)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @tangtangtang12 

I presume you are using ITSI/ITEW which is where you have installed the content pack?

The content pack is only KPIs and relies on specific data to be available - The content pack itself does not onboard the data.

Please check out the docs around the content pack data requirements here: https://docs.splunk.com/Documentation/CPWindowsMon/latest/CP/DataReqs

That docs page gives an inputs.conf sample and other info about the data required for these KPIs to run, including the metrics you are looking for.

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @tangtangtang12 ,

whichAdd-On are you using to extract these information from your windows server?

is you use the Splunk_TA_Window ( https://splunkbase.splunk.com/app/742 ) there's two inputs (disabled by default and to enable) that you can use:

  • [WinHostMon://Computer]
  • [perfmon://Memory]
    • Page Faults/sec;
    • Available Bytes;
    • Committed Bytes;
    • Commit Limit;
    • Write Copies/sec;
    • Transition Faults/sec;
    • Cache Faults/sec;
    • Demand Zero Faults/sec;
    • Pages/sec;
    • Pages Input/sec;
    • Page Reads/sec;
    • Pages Output/sec;
    • Pool Paged Bytes;
    • Pool Nonpaged Bytes;
    • Page Writes/sec;
    • Pool Paged Allocs;
    • Pool Nonpaged Allocs;
    • Free System Page Table Entries;
    • Cache Bytes;
    • Cache Bytes Peak;
    • Pool Paged Resident Bytes;
    • System Code Total Bytes;
    • System Code Resident Bytes;
    • System Driver Total Bytes;
    • System Driver Resident Bytes;
    • System Cache Resident Bytes;
    • % Committed Bytes In Use;
    • Available KBytes;
    • Available MBytes;
    • Transition Pages RePurposed/sec;
    • Free & Zero Page List Bytes;
    • Modified Page List Bytes;
    • Standby Cache Reserve Bytes;
    • Standby Cache Normal Priority Bytes;
    • Standby Cache Core Bytes;
    • Long-Term Average Standby Cache Lifetime (s)

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...