Splunk Dev

How to find amount of RAM available using splunk enterprise?

kkramer2
Engager

I am trying to create an alert when 90% of RAM is used.
I have determined that Committed bytes is the amount of RAM in use but I don't know how to get total RAM.
I am NOT trying to find memory but a percentage of physical ram in use. Thanks

Tags (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @kkramer2,
the real question is how do you take the information about RAM?
if you use the Splunk_TA_Windows ( https://splunkbase.splunk.com/app/742/ ), it can extract many counters:

  • Committed Bytes,
  • Available MBytes,

in this way you can calculate the percentage of used memory on total.

In addition, in the counters there's also "% Committed Bytes In Use" that directly answers to your question.

Ciao.
Giuseppe

0 Karma

kkramer2
Engager

I appreciate your quick response. Is Available MBytes RAM or memory ? I am trying to calculate RAM.

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...