You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

54 lines
1.9 KiB

<form version="1.1">
<label>Analyze a Host Drive - Microsoft Exchange</label>
<fieldset autoRun="true">
<input token="host" type="dropdown" searchWhenChanged="true">
<label>Host</label>
<fieldForLabel>host</fieldForLabel>
<fieldForValue>host</fieldForValue>
<search>
<query>
|inputlookup hostInformation
|stats count by host
</query>
<earliest>-1m</earliest>
<latest>now</latest>
</search>
<selectFirstChoice>true</selectFirstChoice>
</input>
<input token="drive" type="dropdown" searchWhenChanged="true">
<label>Drive</label>
<fieldForLabel>FileDiskName</fieldForLabel>
<fieldForValue>FileDiskName</fieldForValue>
<search>
<query>
eventtype=msexchange-database-stats host=$host|s$ earliest_time=-1d latest_time=now
|stats count by FileDiskName
</query>
</search>
<selectFirstChoice>true</selectFirstChoice>
</input>
</fieldset>
<row>
<table>
<title>Drive Contents</title>
<search>
<query>
eventtype=msexchange-database-stats host=$host|s$ FileDiskName=$drive|s$ earliest_time=-1d latest_time=now
|stats count by Database, host, FileDiskName
|table Database, host, FileDiskName
|rename Database as "Mailbox Database"
|rename host as "Host"
|rename FileDiskName as "Drive" | eval _drilldownMod=replace('Mailbox Database',"\\\\","\\\\\\")
</query>
</search>
<option name="count">10</option>
<option name="rowNumbers">false</option>
<option name="showPager">true</option>
<drilldown>
<link>database_byname?form.database=$row._drilldownMod$</link>
</drilldown>
</table>
</row>
</form>