You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<rule id="304000" level="3">
<if_sid>301000</if_sid>
<field name="winCounter.Path">\\LogicalDisk(*)\\% Free Space</field>
<description>Windows Counter: Available Free Space</description>
<group>STORUsage,</group>
</rule>
<rule id="304001" level="5">
<if_sid>304000</if_sid>
<field name="winCounter.CookedValue" type="pcre2">^[0-1]\d.\d+%$</field>
<description>Windows Counter: Available Disk Space Less Than 20%</description>
<group>STORUsage,</group>
</rule>
And have added this additional counter from my agent.conf but I am not receiving the alerts, other others such as memory and processor usage are just fine so I am thinking there is something wrong in my performance_monitor.xml. Any help would be greatly appreciated.
Hi, I have followed
https://wazuh.com/blog/monitoring-windows-resources-with-performance-counters/ in trying to create counters for my Windows Endpoints, however, I could like to monitor available free space as well.
I have included the below codes into performance_monitor.xml according to the tutorial
And have added this additional counter from my agent.conf but I am not receiving the alerts, other others such as memory and processor usage are just fine so I am thinking there is something wrong in my performance_monitor.xml. Any help would be greatly appreciated.
The text was updated successfully, but these errors were encountered: