Hi,
In order for LEM to alert on low disk space, Windows needs to trigger the Event ID 2013. LEM can then alert if this event appears in your logs.
In order to adjust the threshold at which Windows generates ID 2013, you have to edit/add a registry key. All the information you need on the key should be here: Force Windows Servers To Log An Event Entry For Disk Space :: Admin :: Admin Tips :: Windows Server 2008 :: Windows …
The correlation would look something like this:
