- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What is the correct counter for physical memory utilization for a Windows server WMI data input?
Hi
We have added a Windows server using WMI (Data inputs » Remote performance monitoring » New) and we are able to see all the available counters of that server. Here our client wants to monitor the physical memory utilization (RAM) of that server, so we are not sure here which is the right counter to select here for physical memory usage. Can some one please help us here with the correct counter for physical memory utilization counter. (Due to some client restrictions we cannot install the Splunk universal forwarder agent on that server, so we need to depend on this WMI)
Kindly help us on this
regards
Roopesh
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

If you are not installing forwarder on that server, how are you going to bring the data to Splunk. via the remote WMI calls ?
By the way we have Splunk Addon installed for wmi
and below are the WQL , see if it helps :
[WMI:LocalPhysicalDisk]
#interval = 10
interval = 120
wql = SELECT Name, CurrentDiskQueueLength, DiskBytesPerSec, PercentDiskReadTime, PercentDiskWriteTime, PercentDiskTime FROM Win32_PerfFormattedData_PerfDisk_PhysicalDisk
index = main
disabled = 0
## Memory
## Usually disabled in favor of Perfmon counters
[WMI:Memory]
#interval = 5
interval = 120
wql = SELECT PagesPerSec, AvailableMBytes, CommittedBytes, PercentCommittedBytesInUse FROM Win32_PerfFormattedData_PerfOS_Memory
index = main
disabled = 0
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
Although I haven't used this, there's no reason why it couldn't help you:
1. Retrieve the system's memory data:
Automate a command, e.g. in windows schedule a run for a batch file with the following code:
systeminfo | findstr "Memory" > C:\temp\output_data.txt
2. Send the required information to splunk platform:
Automate this action in any way suitable for you (i.e. python script, permitted software).
Hope I've been helpful 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello Everyone,
Do we have any insights on this query?
If you get something could you please share the same thing. I am looking for the counter which can show Memory and CPU consumption
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Roopesh,
Thanks for posting it out in splunk.
I found your query when I was searching for the same.
keep me posted if you receive an update on this.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello Roopesh,
Have you received an answer for your question or have you find the solution alone ?
I'm in the same trouble and I don't see any counter to have physical memory usage ..
Regards,
Alex
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Its always better to use perfmon
add on to get the system level data for monitoring.
