IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Configuration

edit
- module: windows
  metricsets: ["wmi"]
  period: 60s
  namespace: "root\\cimv2" # Namespace
  queries:
  - class: Win32_OperatingSystem
    fields:
    - FreePhysicalMemory
    - FreeSpaceInPaginFiles
    - NumberOfUsers
    # Where Clasue
    where: ""

Compatibility

edit

This module has been tested on the following platform:

  • Operating System: Microsoft Windows Server 2019 Datacenter
  • Architecture: x86

Other Windows versions and architectures may also work but have not been explicitly tested.

Fields

For a description of each field in the metricset, see the exported fields section.

Here is an example document generated by this metricset:

{
    "@timestamp": "2024-12-12T15:46:39.622Z",
    "event": {
        "dataset": "windows.wmi",
        "duration": 58982500,
        "module": "windows"
    },
    "metricset": {
        "name": "wmi",
        "period": 10000
    },
    "service": {
        "type": "windows"
    },
    "windows": {
        "wmi": {
            "FreePhysicalMemory": 7537796,
            "FreeSpaceInPagingFiles": 2257908,
            "FreeVirtualMemory": 9694064,
            "LocalDateTime": "2024-12-12T15:46:39.62Z",
            "NumberOfUsers": 1,
            "class": "Win32_OperatingSystem",
            "host": "localhost",
            "namespace": "root\\cimv2"
        }
    }
}