Scheduling a report

Running a recurring report that displays all the static features (memory, CPU, and so on) of your Splunk servers probably isn't useful, but a periodic look at disk usage is—so let's modify the preceding report to display just the disk used and the remaining available disk space. On the existing report, click Edit | Open in Search and eliminate most of the previous SPL so that you get a table of server names, disk space used, and available GB as shown in following code:

| rest services/server/status/partitions-space| eval disk_capGB=round(capacity/1024, 3), disk_availGB=round(available/1024, 3), disk_usedGB = disk_capGB - disk_availGB| table splunk_server disk_usedGB disk_availGB

After running the report to ensure it works, ...

Get Splunk 7.x Quick Start Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.