Monitoring Splunk

Configuring Disk space alert for Windows server

jcrival
New Member

Helo, I am new using Splunk. I have installed Splunk forwarder on Windows 2003 server. I would like to configure an alert so everytime the disk is getting full an email would be sent to my email address. The same if the server was turned off or not detected in the network. Could you plase help me?

regards,

Jose Rivera

Tags (1)
0 Karma

JSapienza
Contributor

If you are already collecting WMI data you can build a search like such:

sourcetype="WMI:FreeDiskSpace"  PercentFreeSpace<10 

Otherwise you will need to Enable some WMI inputs and you should read this: Monitor WMI-based data

After you are getting the intended search results , follow this About Alerts to create an alert that meets your needs.

0 Karma
Get Updates on the Splunk Community!

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Announcing the General Availability of Splunk Enterprise Security 8.1!

We are pleased to announce the general availability of Splunk Enterprise Security 8.1. Splunk becomes the only ...

Developer Spotlight with William Searle

The Splunk Guy: A Developer’s Path from Web to Cloud William is a Splunk Professional Services Consultant with ...