Getting Data In

What is the correct counter for physical memory utilization for a Windows server WMI data input?

roopeshetty
Path Finder

Hi

We have added a Windows server using WMI (Data inputs » Remote performance monitoring » New) and we are able to see all the available counters of that server. Here our client wants to monitor the physical memory utilization (RAM) of that server, so we are not sure here which is the right counter to select here for physical memory usage. Can some one please help us here with the correct counter for physical memory utilization counter. (Due to some client restrictions we cannot install the Splunk universal forwarder agent on that server, so we need to depend on this WMI)
Kindly help us on this

regards
Roopesh

0 Karma

macadminrohit
Contributor

If you are not installing forwarder on that server, how are you going to bring the data to Splunk. via the remote WMI calls ?
By the way we have Splunk Addon installed for wmi and below are the WQL , see if it helps :

[WMI:LocalPhysicalDisk]
#interval = 10
interval = 120
wql = SELECT Name, CurrentDiskQueueLength, DiskBytesPerSec, PercentDiskReadTime, PercentDiskWriteTime, PercentDiskTime FROM Win32_PerfFormattedData_PerfDisk_PhysicalDisk
index = main
disabled = 0


## Memory
## Usually disabled in favor of Perfmon counters
[WMI:Memory]
#interval = 5
interval = 120
wql = SELECT PagesPerSec, AvailableMBytes, CommittedBytes, PercentCommittedBytesInUse FROM Win32_PerfFormattedData_PerfOS_Memory
index = main
disabled = 0
0 Karma

GrizzlyMcBear
New Member

Hello,

Although I haven't used this, there's no reason why it couldn't help you:
1. Retrieve the system's memory data:
Automate a command, e.g. in windows schedule a run for a batch file with the following code:
systeminfo | findstr "Memory" > C:\temp\output_data.txt
2. Send the required information to splunk platform:
Automate this action in any way suitable for you (i.e. python script, permitted software).

Hope I've been helpful 🙂

0 Karma

Ajinkya1992
Path Finder

Hello Everyone,
Do we have any insights on this query?
If you get something could you please share the same thing. I am looking for the counter which can show Memory and CPU consumption

0 Karma

rajeshgowda
New Member

Hi Roopesh,
Thanks for posting it out in splunk.
I found your query when I was searching for the same.

keep me posted if you receive an update on this.

0 Karma

access_amosca
New Member

Hello Roopesh,

Have you received an answer for your question or have you find the solution alone ?
I'm in the same trouble and I don't see any counter to have physical memory usage ..

Regards,

Alex

0 Karma

macadminrohit
Contributor

Its always better to use perfmon add on to get the system level data for monitoring.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

If you hear someone at .conf26 shouting "gear down, GEAR DOWN" across the show floor, you have found us.  The ...

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

The surge in machine data is already hitting enterprise budgets, and the agentic era will only intensify it. ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...