All | inputlookup windows_hostmon_system | dedup Host | sort Host Host Host * *
Peak CPU Utilization > 50% in the last 24 hours eventtype=perfmon_index_windows eventtype=perfmon_windows earliest_time=-1d object=Processor counter="% Processor Time" host="$HostMonitoringHost$" | sort -Value | dedup host | eval Value=round(Value) | where Value>50 | rangemap field=Value "50 - 60%"=50-59 "60 - 80%"=60-79 "> 80%"=80-100 | chart count(host), list(host) by range 0 Peak Memory Utilization > 50% in the last 24 hours eventtype=perfmon_index_windows eventtype=perfmon_windows earliest_time=-1d object=Memory counter="% Committed Bytes In Use" host="$HostMonitoringHost$" | sort -Value| dedup host | eval Value=round(Value) | where Value>50 | rangemap field=Value "50 - 60%"=50-59 "60 - 80%"=60-79 "> 80%"=80-100 | chart count(host), list(host) by range 0 Disk Free Space Distribution eventtype=windows_index_windows eventtype=hostmon_windows Type=Disk FreeSpaceKB=* TotalSpaceKB=* host="$HostMonitoringHost$" | dedup Name, host | stats sum(TotalSpaceKB) as TotalSpace, sum(FreeSpaceKB) as FreeSpace by host | eval FreeSpacePct=round(FreeSpace/TotalSpace*100) | rangemap field=FreeSpacePct "<20%"=0-19 "20 - 50%"=20-49 ">50%"=50-100 | chart count(host), list(host) by range 0