Link to home
Start Free TrialLog in
Avatar of JohnArmstrong
JohnArmstrong

asked on

Qradar - how to monitor windows server disk space?

Hello Qradar gurus!  Really need your help on this one. And before you respond --> I know there are many drive-space monitoring solutions out there! I want to utilize a system that I already own to monitor drive space and not introduce ...'yet another utility or process'.

Can someone tell me how to configure Qradar to monitor available hard drive space on a Windows 2003 Server?  

I know that the Windows Server System Event Log generates an event ID of 2013 when a disk is at or near capacity. Any way to use Qradar to look for that event and generate an email alert?
Avatar of David Todd
David Todd
Flag of New Zealand image

Hi,

Is the windows event in sufficient time? That is, if memory serves me correctly, when there really is almost no available disk left. Wouldn't you want an alert for 20% free space or 10% free space?

I have a powershell script that stores these values in a SQL database, and I query that database each morning as part of my daily checks.

Regards
  David
Avatar of JohnArmstrong
JohnArmstrong

ASKER

Hi David, What values are you pulling from Windows server?  Are you pulling the info using WMI and piping it into a dbase?
ASKER CERTIFIED SOLUTION
Avatar of David Todd
David Todd
Flag of New Zealand image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial