Getting Data In

What is the correct counter for physical memory utilization for a Windows server WMI data input?

New Member

Hi

We have added a Windows server using WMI (Data inputs » Remote performance monitoring » New) and we are able to see all the available counters of that server. Here our client wants to monitor the physical memory utilization (RAM) of that server, so we are not sure here which is the right counter to select here for physical memory usage. Can some one please help us here with the correct counter for physical memory utilization counter. (Due to some client restrictions we cannot install the Splunk universal forwarder agent on that server, so we need to depend on this WMI)
Kindly help us on this

regards
Roopesh

0 Karma

Contributor

If you are not installing forwarder on that server, how are you going to bring the data to Splunk. via the remote WMI calls ?
By the way we have Splunk Addon installed for wmi and below are the WQL , see if it helps :

[WMI:LocalPhysicalDisk]
#interval = 10
interval = 120
wql = SELECT Name, CurrentDiskQueueLength, DiskBytesPerSec, PercentDiskReadTime, PercentDiskWriteTime, PercentDiskTime FROM Win32_PerfFormattedData_PerfDisk_PhysicalDisk
index = main
disabled = 0


## Memory
## Usually disabled in favor of Perfmon counters
[WMI:Memory]
#interval = 5
interval = 120
wql = SELECT PagesPerSec, AvailableMBytes, CommittedBytes, PercentCommittedBytesInUse FROM Win32_PerfFormattedData_PerfOS_Memory
index = main
disabled = 0
0 Karma

New Member

Hello,

Although I haven't used this, there's no reason why it couldn't help you:
1. Retrieve the system's memory data:
Automate a command, e.g. in windows schedule a run for a batch file with the following code:
systeminfo | findstr "Memory" > C:\temp\output_data.txt
2. Send the required information to splunk platform:
Automate this action in any way suitable for you (i.e. python script, permitted software).

Hope I've been helpful 🙂

0 Karma

Path Finder

Hello Everyone,
Do we have any insights on this query?
If you get something could you please share the same thing. I am looking for the counter which can show Memory and CPU consumption

0 Karma

New Member

Hi Roopesh,
Thanks for posting it out in splunk.
I found your query when I was searching for the same.

keep me posted if you receive an update on this.

0 Karma

New Member

Hello Roopesh,

Have you received an answer for your question or have you find the solution alone ?
I'm in the same trouble and I don't see any counter to have physical memory usage ..

Regards,

Alex

0 Karma

Contributor

Its always better to use perfmon add on to get the system level data for monitoring.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!