Can anybody help me in creating an alert when for example only 100MB of memory are available?
Not on a remote server, just on the local Splunk server(4.3) itself. It seemed a simple job at first, but I still didn't succeed, even after a lot of reading 😞
I succeeded in creating a local performance monitoring collection with a counter on "Available MBytes" But that's about it, creating an alert for it fills my alert window. Where can I set a threshold to only alert me if "Available MBytes" drop under e.g. 100?
Hi filipvb
save your search and have it run as often you like with a schedule. in the scheduled saved search itself you can define an alert condition and what should be done when the condition is hit.
even more reading can be done here
cheers