Dashboards & Visualizations

real time disk space monitoring configuration for windows server via splunk

yogeshgautamm
Engager

How we can configure disk space alert using Splunk . is it possible 

Labels (1)
0 Karma

yogeshgautamm
Engager

could you please share the alert script or command

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Start with this.  Adjust the values as necessary.  Have the alert trigger when the number of results is not zero.

index=<<index where your perfmon data is stored>> source=disk 
| where storage_free_percent < <<your desired value>>
---
If this reply helps you, Karma would be appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Yes, it is possible. 

1) Install a Universal Forwarder (UF) on the Windows server

2) Enable the [perfmon://LogicalDisk] input on the UF.  Restart the UF for the change to take effect.

3) Create an alert the triggers at the desired value of the % Free Space field.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Splunk Observability Cloud's AI Assistant in Action Series: Auditing Compliance and ...

This is the third post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...