Getting Data In

What is the correct counter for physical memory utilization for a Windows server WMI data input?

roopeshetty
Path Finder

Hi

We have added a Windows server using WMI (Data inputs » Remote performance monitoring » New) and we are able to see all the available counters of that server. Here our client wants to monitor the physical memory utilization (RAM) of that server, so we are not sure here which is the right counter to select here for physical memory usage. Can some one please help us here with the correct counter for physical memory utilization counter. (Due to some client restrictions we cannot install the Splunk universal forwarder agent on that server, so we need to depend on this WMI)
Kindly help us on this

regards
Roopesh

0 Karma

macadminrohit
Contributor

If you are not installing forwarder on that server, how are you going to bring the data to Splunk. via the remote WMI calls ?
By the way we have Splunk Addon installed for wmi and below are the WQL , see if it helps :

[WMI:LocalPhysicalDisk]
#interval = 10
interval = 120
wql = SELECT Name, CurrentDiskQueueLength, DiskBytesPerSec, PercentDiskReadTime, PercentDiskWriteTime, PercentDiskTime FROM Win32_PerfFormattedData_PerfDisk_PhysicalDisk
index = main
disabled = 0


## Memory
## Usually disabled in favor of Perfmon counters
[WMI:Memory]
#interval = 5
interval = 120
wql = SELECT PagesPerSec, AvailableMBytes, CommittedBytes, PercentCommittedBytesInUse FROM Win32_PerfFormattedData_PerfOS_Memory
index = main
disabled = 0
0 Karma

GrizzlyMcBear
New Member

Hello,

Although I haven't used this, there's no reason why it couldn't help you:
1. Retrieve the system's memory data:
Automate a command, e.g. in windows schedule a run for a batch file with the following code:
systeminfo | findstr "Memory" > C:\temp\output_data.txt
2. Send the required information to splunk platform:
Automate this action in any way suitable for you (i.e. python script, permitted software).

Hope I've been helpful 🙂

0 Karma

Ajinkya1992
Path Finder

Hello Everyone,
Do we have any insights on this query?
If you get something could you please share the same thing. I am looking for the counter which can show Memory and CPU consumption

0 Karma

rajeshgowda
New Member

Hi Roopesh,
Thanks for posting it out in splunk.
I found your query when I was searching for the same.

keep me posted if you receive an update on this.

0 Karma

access_amosca
New Member

Hello Roopesh,

Have you received an answer for your question or have you find the solution alone ?
I'm in the same trouble and I don't see any counter to have physical memory usage ..

Regards,

Alex

0 Karma

macadminrohit
Contributor

Its always better to use perfmon add on to get the system level data for monitoring.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...