Monitoring Splunk

How to set an email for Indexer server diskspace usage is full?


In my scenario the indexer is working but diskspace is 100% in /splunk/data1.when i used source=df i dint see the mentioned path in the result .how to find and set alert for the particular path.

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!