Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

How to enable heap counters for Sysmon

View products that this article applies to.

This article was previously published under Q290639
Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 ( ) How to back up and restore the registry in Windows

↑ Back to the top


The heap performance-monitoring counter is a new feature in Microsoft Windows XP. This feature is included in Microsoft Windows Server 2003, Windows Vista, and Windows Server 2008. Performance Logs and Alerts (Perfmon.exe) can display about 20 heap-related counters. These counters are not enabled by default; you must enable them.

↑ Back to the top

More information

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.
Additional heap counters:
Total Frees/sec
Committed Bytes
Reserved Bytes
Virtual Bytes
Free Bytes
Free List Length
Avg. alloc rate
Avg. free rate
Uncommitted Ranges Length
Allocs - Frees
Cached Allocs/sec
Cached Frees/sec
Allocs <1K/sec
Frees <1K/sec
Allocs 1-8K/sec
Frees 1-8K/sec
Allocs over 8K/sec
Frees over 8K/sec
Total Allocs/sec
Blocks in Heap Cache
Largest Cache Depth
% Fragmentation
% VAFragmentation

Heap Lock contention
Perfmon.exe displays these counters when the following registry key is set:
For the changes to take effect, you need to restart the computer after you modify the registry. Note that only the process heap and the heaps with higher usage are monitored.

↑ Back to the top

Keywords: KB290639, kbhowto

↑ Back to the top

Article Info
Article ID : 290639
Revision : 3
Created on : 4/11/2008
Published on : 4/11/2008
Exists online : False
Views : 294