I am searching for a 'search' that will give me the following information:
Disk usage (C:) in %
Total Disk size (C:)
Free Disk space (C:)
I know there is Windows App, but I would like to achieve this **without** that
index = "perfmonxx" collection = FreeDiskSpace (counter="% Free Space" OR counter="Free Megabytes") instance=C: host=xx
| eval usage=(100-Value)
| eval GB=(Value/1024)
| eval size=GB*(100/(100-usage))
| eval usage1=(ceiling(usage))
| eval GB1=(floor(GB)) | stats max(usage1) as Usage max(size) as Total max(GB1) as Free by host
---
Using this I get the usage (in %) and the available free space (in GB) correctly, **but** the (manual) calculation 'for total size' doesn't show me the correct result.
When I calculate it manually (using e.g. calculator) it gives me the correct result: size = 9.x * (100 / (100 - 83.x) ~ 60 GB
**But** the outcome in Splunk gives me a different result. I am stucked, please advice.
![alt text][1]
[1]: /storage/temp/153218-example.png
↧