Getting Data In
Highlighted

Is there an easy way to monitor disk size from a remote Windows machine?

Contributor

Hi,

i have a windows environment and universal forwarder installed on the servers and forwarding different type of logs.
i want to monitor the disk size for the server as its drives sometimes fills up with logs files and basically after that create an alert when it reaches a certain point.

i am using forwarder on the server with wmi.conf as it seems like the way to send that data.i tried using perfmon://LocalPhysicalDisk stanza with wmi.conf but i think that is only used for local systems so i am using WMI:LocalPhysicalDisk stanza now

this is what i set up on my wmi.conf from the splunk documentation but i think this only give me the disk and memory performance.i am sure there is an esay way to just get disk size but can't seem to find it.any help is greatly appreciated

[WMI:LocalPhysicalDisk]
interval = 300
wql = select Name, DiskBytesPerSec, PercentDiskReadTime,PercentDiskWriteTime, PercentDiskTime from \
Win32PerfFormattedDataPerfDiskPhysicalDisk
disabled = 0
index = fam
perfmon

[WMI:LocalMainMemory]
interval = 300
wql = select CommittedBytes, AvailableBytes, PercentCommittedBytesInUse, Caption from \
Win32PerfFormattedDataPerfOSMemory
disabled = 0
index = fam
perfmon

Thanks alot in advance

0 Karma
Highlighted

Re: Is there an easy way to monitor disk size from a remote Windows machine?

Ultra Champion

You could try:

[WMI:LocalPhysicalDiskInfo]
interval = 300
wql = select Name, FreeSpace, Size from Win32_LogicalDisk
disabled = 0
index = fam_perfmon

View solution in original post

Highlighted

Re: Is there an easy way to monitor disk size from a remote Windows machine?

Contributor

Thanks Nickhillscpl. that is exactly what i was looking for.