We are currently working to get the %Committed bytes in use to get into Splunk as a counter as we need to create an alert on the available memory. We have enabled the committed bytes counter in the input.config file. But the counter still doesn't show in the search?
We need to calculate the available memory of the system. So that we can create an alert if it goes down below a threshold?
... View more
Thank you Martin.
I am actually monitoring some logs which doesn't seem to have any values to compare to the last value (checkpoint). Would timestamp be a good option to do so for the rising column selection. as I think it creates more problems than it solves in rising column selection. any suggestions?
... View more
Thank You Martin,
I agree with you. Let's say we write a query to create a composite key. but how do we specify the checkpoint value when we run for the very first time. and if we are choosing the rising column as ID let's say which is not an integer, a GUID, how do we select the checkpoint value.
... View more
Can we give a composite key ( a combination of two primary keys) as a rising column? And If we can what should be the initial checkpoint value taking into consideration that it will be having GUID.
... View more