Splunk search for Memory usage by Splunk server
Copy
| rest splunk_server=* /services/server/status/resource-usage/hostwide | eval "% Memory Used"=round(mem_used/mem,4)*100 | table splunk_server "% Memory Used" | rename splunk_server as "Splunk Server"
This search will show the percentage of memory currently being used by each Splunk host. This will return results only for search peers of the Search Head on which it is run. In order to run this search you must have the rest_properties_get capability.