Monitoring Splunk

How to set an alert when splunk's disk/volume is at 80%

mufthmu
Path Finder

Hello,

I have Splunk 8.0.2. My splunk instance is hosted in AWS and has 2 volumes (1 is root volume).

What would be the appropriate alert query to trigger when disk is at 80% full?

Thanks

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Settings->Monitoring Console->Settings->Alerts Setup->DMC Alert - Near Critical Disk Usage

---
If this reply helps you, Karma would be appreciated.

View solution in original post

mufthmu
Path Finder

Would you mind helping me navigate where to find this built-in alert? I appreciate you.

@richgalloway 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Settings->Monitoring Console->Settings->Alerts Setup->DMC Alert - Near Critical Disk Usage

---
If this reply helps you, Karma would be appreciated.

richgalloway
SplunkTrust
SplunkTrust

The Monitoring Console has a built-in alert for that.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...