Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Possible to monitor disk space remaining?

$
0
0

It is possible to make Windows log a disk space alert which LEM can then normalize ( I haven't checked this for Windows 2012)

 

Window 2003 and 2008 including R2: You will have to create 2 DWORDs. DiskSpaceThreshold and LowDiskSpaceMinimum. These DWORDs do not exist by default, and will require a reboot to take effect.

DiskSpaceThreshold refers to the free space threshold (http://technet.microsoft.com/en-us/library/cc786996(v=ws.10).aspx)

LowDiskSpaceMinimum refers to the threshold in MB below which the alert (http://technet.microsoft.com/en-us/library/cc784049(v=ws.10).aspx)

 

Both conditions will be evaluated unless LowDiskSpaceMinimum is set to 0. They DWORDs must be added under this registry key

HKEY_LOCAL_MACHINE

\SYSTEM

\CurrentControlSet

\Services

\LanmanServer

\Parameters

  • The disk space is checked every 5 minutes and an Event ID 2013 is generated in the System log if the conditions are met
  • The Event is not generated multiple times if the free space continues to fall. A fresh event is generated only when the condition is remediated, and the thresholds are breached again

 

In LEM, the Event will appear as a ServiceWarning event with a ProviderSID of srv 2013.

 

What else do you currently monitor in EventSentry?


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>