Getting Data In

How do you calculate the RAM on windows (perfmon) ?

henriq_c
Explorer

Hello,

I want to calculate the percentage of the RAM utilization and I do this but I know it is not good. Do you have a better proposition ?

index=xxx host=xxxx eventtype="perfmon_windows" object="Memory" counter="% Committed Bytes In Use"
| timechart span=1m eval(round(latest(Value),4)) as "RAM"

Same for the RAM utilization in Go :

index=xxx host=xxxx eventtype="perfmon_windows" object="Memory" counter="% Committed Bytes In Use" OR counter="Committed Bytes"

| eval percentused = case( counter=="% Committed Bytes In Use", round(Value, 4) )
| eval committed = case( counter=="Committed Bytes", round(Value, 4) )
| eval usedbytes = (percentused/100)*committed

| timechart span=1m eval((round(latest(percentused),4)) / 100 * round(latest(committed),4) / 1000000000) as "RAM"

Thanks

Tags (3)
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...