https://community.splunk.com/t5/Splunk-Search/Disk-usage-Alerts/m-p/13808#M1380 <P>You should look at the formatting tools in the input box toolbar. There is a button to format code so that it displays as typed in the box.</P> Wed, 19 May 2010 18:58:45 GMT gkanapathy 2010-05-19T18:58:45Z https://community.splunk.com/t5/Splunk-Search/Disk-usage-Alerts/m-p/13806#M1378 <P>I am trying to set up a search then alert on our *nix systems SAN-LUNs storage system. I modified a default *NIX disk usage search, however it only works with reporting on /dev/sda usage. I do not know how to specify the variables for a SAN storage LUN or BOOT partition. </P> <P>I have enclosed a copy of my FSTAB file, and a df listing. (Sorry about the formatting?) </P> <P>FSTAB /dev/VolGroup00/LogVol00 / ext3 defaults 1 1 LABEL=/boot /boot ext3 defaults 1 2 tmpfs /dev/shm tmpfs defaults 0 0 devpts /dev/pts devpts gid=5,mode=620 0 0 sysfs /sys sysfs defaults 0 0 proc /proc proc defaults 0 0 /dev/VolGroup00/LogVol01 swap swap defaults 0 0</P> <P>root@ihswp1 adminmm0]# df -h -T Filesystem Type Size Used Avail Use% Mounted on</P> <P>/dev/mapper/VolGroup00-LogVol00 ext3 9.7G 8.6G 602M 94% / /dev/sda1 ext3 99M 24M 71M 26% /boot tmpfs tmpfs 1014M 0 1014M 0% /dev/shm</P> <P>Any help would be appreciated. Thank you</P> <P>V</P> Wed, 19 May 2010 10:24:20 GMT https://community.splunk.com/t5/Splunk-Search/Disk-usage-Alerts/m-p/13806#M1378 Voltaire 2010-05-19T10:24:20Z https://community.splunk.com/t5/Splunk-Search/Disk-usage-Alerts/m-p/13807#M1379 <P>You should look at the Splunk for Unix app, in particular the <CODE>df.sh</CODE> script for collecting information about your disks in a convenient format for Splunk to parse.</P> Wed, 19 May 2010 18:57:56 GMT https://community.splunk.com/t5/Splunk-Search/Disk-usage-Alerts/m-p/13807#M1379 gkanapathy 2010-05-19T18:57:56Z https://community.splunk.com/t5/Splunk-Search/Disk-usage-Alerts/m-p/13808#M1380 <P>You should look at the formatting tools in the input box toolbar. There is a button to format code so that it displays as typed in the box.</P> Wed, 19 May 2010 18:58:45 GMT https://community.splunk.com/t5/Splunk-Search/Disk-usage-Alerts/m-p/13808#M1380 gkanapathy 2010-05-19T18:58:45Z