The following Splunk query shows a percentage of free disk space over a period of time using timechart:

index=os sourcetype=df PercentFreeSpace=* mount="/" | timechart latest(PercentFreeSpace) by host