Configuring Disk space alert for Windows server when 85% space alert to send email


 I have installed Splunk forwarder on Windows  server. I would like to configure an alert so everytime the disk is getting full an email would be sent to my email address. The same if the server was turned off or not detected in the network. Could you plase help me?

i check the forum have related info 


sourcetype="WMI:FreeDiskSpace" PercentFreeSpace<10

Metrics index is meaning for? 

and i look for splunk which portal to setup my alert 

Splunk Search Explanation

| mstats avg(LogicalDisk.%_Free_Space) AS "win_storage_free" WHERE index="<name of your metrics index>" host="<names of the hosts you want to check>" instance="<names of drives you want to check)>" instance!="_Total" BY host, instance span=1mSearch metrics index(es) where perfmon disk space data is being collected and filter down to the desired host(s) to check.
| eval storage_used_percent=round(100-win_storage_free,2)Convert percent storage free to percent storage used for readability.
| eval host_dev=printf("%s:%s\\",host,instance)Create a new field that combines the host and disk drive.
| timechart max(storage_used_percent) AS storage_used_percent BY host_devPlot the storage used for each host and disk over time.

Windows disk drive utilization nearing capacity - Splunk Lantern

Monitor data through Windows Management Instrumentation (WMI) - Splunk Documentation 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...

Admin Your Splunk Cloud, Your Way

Join us to maximize different techniques to best tune Splunk Cloud. In this Tech Enablement, you will get ...

Cloud Platform | Discontinuing support for TLS version 1.0 and 1.1

Overview Transport Layer Security (TLS) is a security communications protocol that lets two computers, ...