FortiSIEM Disk Growth Trend – Monthly

Disk Growth Trend – Monthly

Event Type: PH_DEV_MON_SYS_DISK_TREND_MONTH

Disk Capacity

Util

diskUtil double Disk utilization for a specific disk name (between 0-100).
Free Disk (MB) freeDiskMB uint32 Size of free disk available in MBytes
Total Disk (MB) totalDiskMB uint32 Size of total disk in MBytes
Used Disk (MB) usedDiskMB uint32 Size of used disk in MBytes
Current Week

Disk Growth

(MB)

diskGrowthMBWeekly double Disk growth (MB) for the current week
Avg Weekly

Disk Growth

(MB)

avgDiskGrowthMBWeekly double Running avg of weekly disk growth (MB) overall previous days
Days To Disk

Full

timeToDiskFull uint32 Number of days until disk is full (from weekly growth statistics)
Poll Interval pollIntv uint32 Polling interval in seconds.

Description: Event containing disk usage growth trend – monthly view Source:

Microsoft Windows (SNMP or WMI), Linux (SNMP), Solaris (SNMP), HP-UX (SNMP), IBM AIX (SNMP) NetApp DataONTAP (SNMP)

Key Attributes:

Name Id Type Description
Event Type eventType string Event type set to PH_DEV_MON_SYS_DISK_TREND_DAY
Event Severity eventSeverity uint16 Set to 1. In general, a number between 0 (lowest severity) and 10 (highest severity)
Event Severity

Category

eventSeverityCat string Set to Low. IN general, takes the values Low, Medium and High. Event Severities 0-4 are mapped to Low, 5-8 are mapped to Medium and 9-10 are mapped to High
Event Receive

Time

phRecvTime Date Time at which AccelOps generated this event
Reporting IP reptDevIpAddr Date IP address of device reporting this event. In this case set to the device reporting the utilization (same as Host name attribute)
Relaying IP relayDevIpAddr Date IP address of device relaying this event from the source to AccelOps. In general it could be a syslog-ng IP address but in this, since AccelOps talks to the device directly, Relaying IP is set to AccelOps IP Address.
Raw Event Log rawEventMsg string Raw event containing all attributes in comma separated “[Attribute] = value” format.
Host name hostName string Host name (as in AccelOps CMDB) of the device whose disk utilization is being reported
Host IP Address hostIpAddr IP Access IP (as in AccelOps CMDB) of the device whose disk utilization is being reported
Disk Name diskName string Disk name
Disk Capacity

Util

diskUtil double Disk utilization for a specific disk name (between 0-100).
Free Disk (MB) freeDiskMB uint32 Size of free disk available in MBytes
Total Disk (MB) totalDiskMB uint32 Size of total disk in MBytes
Used Disk (MB) usedDiskMB uint32 Size of used disk in MBytes
Current Monthly

Disk Growth

(MB)

diskGrowthMBMonthly double Disk growth (MB) for the current month
Avg Monthly

Disk Growth

(MB)

avgDiskGrowthMBMonthly double Running avg of monthly disk growth (MB) overall previous months
Days To Disk

Full

timeToDiskFull uint32 Number of days until disk is full (from monthly growth statistics)
Poll Interval pollIntv uint32 Polling interval in seconds.

 


Having trouble configuring your Fortinet hardware or have some questions you need answered? Ask your questions in the comments below!!! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

Leave a Reply

Name *
Email *
Website