Splunk Dev

How to find amount of RAM available using splunk enterprise?


I am trying to create an alert when 90% of RAM is used.
I have determined that Committed bytes is the amount of RAM in use but I don't know how to get total RAM.
I am NOT trying to find memory but a percentage of physical ram in use. Thanks

Tags (1)
0 Karma


Hi @kkramer2,
the real question is how do you take the information about RAM?
if you use the Splunk_TA_Windows ( https://splunkbase.splunk.com/app/742/ ), it can extract many counters:

  • Committed Bytes,
  • Available MBytes,

in this way you can calculate the percentage of used memory on total.

In addition, in the counters there's also "% Committed Bytes In Use" that directly answers to your question.


0 Karma


I appreciate your quick response. Is Available MBytes RAM or memory ? I am trying to calculate RAM.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...