Splunk Search

How to search for disk usage greater than 70 percent for 10 mins?

londonColney
Loves-to-Learn

I wanted to know how we can construct a search query for a service which is running on a centOS server and the utilization has exceeded 70 per cent for last 10 mins ? We are supposed to create an alert if such kind of situation arises? Any help would be greatly appreciated.

Tags (2)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Have you considered Splunk Add-on for Unix and Linux from SplunkBase?

0 Karma

londonColney
Loves-to-Learn

@ITWhisperer No I have not considered it.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...