https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-line-chart-for-disk-space-by-server-and-hard/m-p/267188#M80383 <P>Regular events from perfmon for example:</P> <P>collection="Free Disk Space"<BR /> object=LogicalDisk<BR /> counter="% Free Space"<BR /> instance=C:<BR /> Value=30.601598715187794<BR /> host = server1</P> <P>collection="Free Disk Space"<BR /> object=LogicalDisk<BR /> counter="% Free Space"<BR /> instance=C:<BR /> Value=63.5187794<BR /> host = server2</P> <P>server1 has 3 drive letters C:, E:, F:.<BR /> server 2 has 1 drive letter C:<BR /> server 3 has 3 drive letters C:, D:, E:</P> Wed, 01 Feb 2017 17:23:26 GMT jsndvl11 2017-02-01T17:23:26Z https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-line-chart-for-disk-space-by-server-and-hard/m-p/267186#M80381 <P>I'm new to Splunk and need some help with a chart for disk space usage. I'm getting the data already in Splunk Light and would like to do a line chart that displays ALL servers and ALL drives in the same chart. </P> <P>Thanks for your help.</P> Wed, 01 Feb 2017 16:41:17 GMT https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-line-chart-for-disk-space-by-server-and-hard/m-p/267186#M80381 jsndvl11 2017-02-01T16:41:17Z https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-line-chart-for-disk-space-by-server-and-hard/m-p/267187#M80382 <P>Sample events please.</P> Wed, 01 Feb 2017 17:12:19 GMT https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-line-chart-for-disk-space-by-server-and-hard/m-p/267187#M80382 somesoni2 2017-02-01T17:12:19Z https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-line-chart-for-disk-space-by-server-and-hard/m-p/267188#M80383 <P>Regular events from perfmon for example:</P> <P>collection="Free Disk Space"<BR /> object=LogicalDisk<BR /> counter="% Free Space"<BR /> instance=C:<BR /> Value=30.601598715187794<BR /> host = server1</P> <P>collection="Free Disk Space"<BR /> object=LogicalDisk<BR /> counter="% Free Space"<BR /> instance=C:<BR /> Value=63.5187794<BR /> host = server2</P> <P>server1 has 3 drive letters C:, E:, F:.<BR /> server 2 has 1 drive letter C:<BR /> server 3 has 3 drive letters C:, D:, E:</P> Wed, 01 Feb 2017 17:23:26 GMT https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-line-chart-for-disk-space-by-server-and-hard/m-p/267188#M80383 jsndvl11 2017-02-01T17:23:26Z https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-line-chart-for-disk-space-by-server-and-hard/m-p/267189#M80384 <P>Depends upon what you want to plot as x-axis value and what as series, try something like this (check the sourcetype name is correct or not)</P> <P>host on x-axis, and one line for each drive</P> <PRE><CODE>index=foo sourcetype="Perfmon:Logical Disk" | chart avg(Value) over host by instance limit=0 </CODE></PRE> <P>drive on x-axis, and one line for each host</P> <PRE><CODE>index=foo sourcetype="Perfmon:Logical Disk" | chart avg(Value) over instance by host limit=0 | rename instance as drive </CODE></PRE> Wed, 01 Feb 2017 17:32:33 GMT https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-line-chart-for-disk-space-by-server-and-hard/m-p/267189#M80384 somesoni2 2017-02-01T17:32:33Z https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-line-chart-for-disk-space-by-server-and-hard/m-p/267190#M80385 <P>yes, please post what you have (code and a sample event) so we can be of most help.</P> Wed, 01 Feb 2017 17:37:24 GMT https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-line-chart-for-disk-space-by-server-and-hard/m-p/267190#M80385 DalJeanis 2017-02-01T17:37:24Z https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-line-chart-for-disk-space-by-server-and-hard/m-p/267191#M80386 <P>Thanks for your help. This is what I was looking for.</P> Wed, 01 Feb 2017 18:06:51 GMT https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-line-chart-for-disk-space-by-server-and-hard/m-p/267191#M80386 jsndvl11 2017-02-01T18:06:51Z