Splunk Memory Metrics

[asarolkar]

Currently splunk provides for an out-of-the-box way of looking at Memory usage for all hosts that are being monitored.

If you check the Perfmon metrics tab, the following default sourcetypes start getting populated when splunk is up and running and can be used to quantify memory usage by looking at avg(value) for all of these:

sourcetype="Perfmon:Available Memory"
sourcetype="Perfmon:Free Disk Space"
sourcetype="Perfmon:CPU Load"

Is there a way for us to get OTHER more definitive Splunk Memory metrics ?

A pointer to an add-on or a search that measures memory usage across the board would be helpful.

Thanks

[richgalloway]

Have you checked out the Splunk-on-Splunk app?