Identify Disk Utilization within an hour

kcharlz

Dear Friends,

I would like to have a dashboard or create an alert or report for disk which was a 75% and raised above 90% within an hour.

Example:

Disk Utilization at 4:00 PM = 78%

Disk Utilization at 5:00 PM = 92%

This has to be detected and team needs to be notified either by Alert or periodic report or Dashboard

Thanks!

Charles

weston.hood

For alert notifications; 

There are out-of-the-box alerts that would be a great starting point. You can enable these alerts and configure the email action to send to you. You could modify the alerts to notify you when less than 10% instead of 5%. 

You could also make a volume alert that goes by status (volume status = warning/critical). Default warning is 80% and critical is 95% full. You can edit thresholds for each individual volume that you monitor. Or you can edit thresholds at the global level. 

For dashboard display; 

You can use the Top XX Volumes by disk space used. You can filter to show any number (e.g. top 10, top 25, etc). You can also filter to only show you fixed disk type to exclude memory (if desired). To filter, just hit edit in upper right of resource and put in the filter I screen capped below

For reporting;

I'm going to guess the complexity of this query is not going to be handled by SWQL, and therefore will only work in a Report rather than the custom resource widget. You can create a new SQL report and this query will give you the percent change in the last 24 hours. I'm sure you can modify it to be smaller or larger timeframe if desired. 

	SELECT 
    V.VolumeID,
    V.MaxTimestamp AS Timestamp,
    V.PercentDiskUsed AS CurrentPercentDiskUsed,
    COALESCE(P24.PercentDiskUsed, 0) AS PercentDiskUsed24HoursAgo,
    (V.PercentDiskUsed - COALESCE(P24.PercentDiskUsed, 0)) / NULLIF(COALESCE(P24.PercentDiskUsed, 0), 0) * 100 AS PercentDifference
FROM 
    (
        SELECT 
            VolumeID,
            MAX(Timestamp) AS MaxTimestamp,
            MAX(PercentDiskUsed) AS PercentDiskUsed
        FROM 
            [VolumeUsage_CS_cur]
        WHERE 
            Timestamp >= DATEADD(HOUR, -24, GETDATE())
        GROUP BY 
            VolumeID
    ) V
LEFT JOIN 
    (
        SELECT 
            VolumeID,
            PercentDiskUsed,
            ROW_NUMBER() OVER (PARTITION BY VolumeID ORDER BY Timestamp DESC) AS rn
        FROM 
            [VolumeUsage_CS_cur]
        WHERE 
            Timestamp < DATEADD(HOUR, -24, GETDATE())
    ) P24 ON V.VolumeID = P24.VolumeID AND P24.rn = 1
ORDER BY 
    PercentDifference DESC;

With this result you can identify large delta's in a given time period and hopefully avoid the situation you were in previously.