We have added a Windows server using WMI (Data inputs » Remote performance monitoring » New) and we are able to see all the available counters of that server. Here our client wants to monitor the physical memory utilization (RAM) of that server, so we are not sure here which is the right counter to select here for physical memory usage. Can some one please help us here with the correct counter for physical memory utilization counter. (Due to some client restrictions we cannot install the Splunk universal forwarder agent on that server, so we need to depend on this WMI)
Kindly help us on this
If you are not installing forwarder on that server, how are you going to bring the data to Splunk. via the remote WMI calls ?
By the way we have Splunk Addon installed for
wmi and below are the WQL , see if it helps :
[WMI:LocalPhysicalDisk] #interval = 10 interval = 120 wql = SELECT Name, CurrentDiskQueueLength, DiskBytesPerSec, PercentDiskReadTime, PercentDiskWriteTime, PercentDiskTime FROM Win32_PerfFormattedData_PerfDisk_PhysicalDisk index = main disabled = 0 ## Memory ## Usually disabled in favor of Perfmon counters [WMI:Memory] #interval = 5 interval = 120 wql = SELECT PagesPerSec, AvailableMBytes, CommittedBytes, PercentCommittedBytesInUse FROM Win32_PerfFormattedData_PerfOS_Memory index = main disabled = 0
Although I haven't used this, there's no reason why it couldn't help you:
1. Retrieve the system's memory data:
Automate a command, e.g. in windows schedule a run for a batch file with the following code:
systeminfo | findstr "Memory" > C:\temp\output_data.txt
2. Send the required information to splunk platform:
Automate this action in any way suitable for you (i.e. python script, permitted software).
Hope I've been helpful 🙂
Do we have any insights on this query?
If you get something could you please share the same thing. I am looking for the counter which can show Memory and CPU consumption
Have you received an answer for your question or have you find the solution alone ?
I'm in the same trouble and I don't see any counter to have physical memory usage ..