Dashboards & Visualizations

real time disk space monitoring configuration for windows server via splunk

yogeshgautamm
Engager

How we can configure disk space alert using Splunk . is it possible 

Labels (1)
0 Karma

yogeshgautamm
Engager

could you please share the alert script or command

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Start with this.  Adjust the values as necessary.  Have the alert trigger when the number of results is not zero.

index=<<index where your perfmon data is stored>> source=disk 
| where storage_free_percent < <<your desired value>>
---
If this reply helps you, Karma would be appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Yes, it is possible. 

1) Install a Universal Forwarder (UF) on the Windows server

2) Enable the [perfmon://LogicalDisk] input on the UF.  Restart the UF for the change to take effect.

3) Create an alert the triggers at the desired value of the % Free Space field.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Index This | What did the zero say to the eight?

June 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

Splunk Observability Cloud's AI Assistant in Action Series: Onboarding New Hires & ...

This is the fifth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Now Playing: Splunk Education Summer Learning Premieres

It’s premiere season, and Splunk Education is rolling out new releases you won’t want to miss. Whether you’re ...