i try also with table key but everytime i get the value of redCritical yellowWarning greenOK as 0
index=main sourcetype="Perfmon:Free Disk Space" ( instance="C:" OR instance="D:")
| eval key= host."-".instance
| chart latest(Value) as Valuex by key
| eval PercentUsed = 100 - Valuex
| eval redCritical = if(PercentFree >= 86,PercentFree ,0)
| eval yellowWarning = if(PercentFree > 76 AND PercentFree <=85,PercentFree ,0)
| eval greenOK= if(PercentFree < 75,PercentFree ,0)
| table key,redCritical,yellowWarning,greenOK
key redCritical yellowWarning greenOK
PostNL-WTS-C: 0 0 0
PostNL-WTS-D: 0 0 0
WIN-G1OI73OMETI-C: 0 0 0
... View more