hello,
I use this query in order to calculate the remaining space in percent.
I also need to calculate the disk size from this source type.
How do I find the disk size from the counter Freespace and Free MB please?
index=perfom sourcetype=perfmon:logicaldisk | where Value <15
| dedup host
| eval time = strftime(_time, "%m/%d/%Y %H:%M") | eval Value = round(Value, 1). " %" | rename Value as Free_Space
| table time host Free_Space | sort -Free_Space limit=10
You can do eval Value= Value/1024/1024
, that will be in MB, and one more Value/1024/1024/1024 will be GB.
index=perfom sourcetype=perfmon:logicaldisk | where Value <15
| dedup host
| eval time = strftime(_time, "%m/%d/%Y %H:%M")
| eval Value= Value/1024/1024
| eval Value = round(Value, 1). " %"
| rename Value as Free_Space
| table time host Free_Space | sort -Free_Space limit=10
thanks but it's not what I want
i want to know if its possible to find the size disk in MB from the fcounter free space and free mb
i want to know if its possible to find the size disk in MB from the fcounter free space and free mb /// i am not sure how to do that. if you let us know the logic, then we can write the query.