Low Disk Space Alert for Windows Servers

eventtype=hostmon_windows Type=Disk host="*" FileSystem="*" DriveType="*" | dedup host, Name | eval FreeSpacePct=round(FreeSpaceKB/TotalSpaceKB*100) | eval TotalSpaceGB=round(TotalSpaceKB/1024/1024) | eval FreeSpaceGB=round(FreeSpaceKB/1024/1024) | search FreeSpacePct<10 TotalSpaceGB="*" | dedup host, Name, DriveType, TotalSpaceGB, FreeSpaceGB, FreeSpacePct | table host, Name, DriveType, TotalSpaceGB, FreeSpaceGB, FreeSpacePct | sort FreeSpacePct
Share This:
Tagged:

Comments

  1. Matt

    This is almost great but TotalSpaceKB/1024/1024 & FreeSpaceKB/1024/1024 should be changed to “TotalSpaceKB*.000001” and “FreeSpaceKB*.000001” without the quotations. Otherwise this is great! Thanks!

Leave A Comment?