Skip to main content
Storage & files

Disk Space Change

Detect drives that fill up unusually fast or suddenly free a lot of space over a period you choose.

The Disk Space Change check compares each drive's current free space with an earlier reading and reports how much space was consumed or freed over a period you choose. This lets you spot a drive that is filling up unusually fast, even while it still has plenty of free space. To monitor how much space is currently free, use the Disk Space check. The check runs on Windows, Linux, and macOS (x64 and Arm64 each), every 60 minutes by default.

Steps

  1. Go to Devices and open the device.
  2. Click the Checks tab → Add Check → Disk Space Change.
  3. Choose the drives, the Comparison period (hours), the direction under Alert on, and the thresholds.
  4. Click Add Check.

Alternatively, assign the check with a config package.

Settings

FieldTypeRequiredDefaultDescription
Monitor all drivesbooleanNoOnMonitors all detected drives automatically
Drives to monitorlist of drivesNo—Shown only when Monitor all drives is off. Pick from the drives detected on the device (e.g. C:)
Comparison period (hours)integerNo24How far back the current free space is compared (1–720; values outside this range are clamped)
Alert onchoice (Space consumed / Space freed / Any change)NoSpace consumedWhich direction of change can trigger an alert
Threshold modechoice (Absolute values / Percent values)NoPercent valuesWhether the change is evaluated as an amount of space or as a share of the drive capacity
Warning — change (% of capacity)numberNo5Percent values only. Warning when the change over the period reaches this share of the drive capacity
Critical — change (% of capacity)numberNo10Percent values only. Critical when the change reaches this share
Warning — changeamount (GB)No5 GBAbsolute values only. Warning when the change over the period reaches this value
Critical — changeamount (GB)No10 GBAbsolute values only. Critical when the change reaches this value
  • With Monitor all drives, the check only includes local fixed disks on Windows, not network, removable, or optical drives. On Linux and macOS it skips virtual file systems and system volumes.
  • If a warning threshold is higher than the matching critical threshold, the check swaps the two values before evaluation.
  • With Space freed you can detect, for example, that an unusually large amount of data was deleted.

Results

The check evaluates each drive separately. It compares the current free space with the oldest stored reading that is still inside the comparison period and only counts the direction chosen under Alert on.

ResultCondition
OKThe change in the chosen direction is below the warning threshold, or there is no earlier reading yet
WarningThe change reaches the warning threshold (≥)
CriticalThe change reaches the critical threshold (≥)
FailureA drive could not be measured because of an unexpected error

The overall result is the worst result across all drives. If no drive is measured at all, for example because none is ready, the check reports Warning. Without any change in the chosen direction the result is always OK, even if you set a threshold to 0.

For each drive the check shows:

  • Change in free space over the period, also as a share of capacity
  • The period actually compared, in hours, and the resulting change per day
  • Used, free, and total space
  • When free space is shrinking, a projection of how many days until the drive is full (only when under 400 days)

Readings and baseline

  • The device stores the readings itself. On the first run after assignment there is no earlier reading yet: the drive shows as OK with the hint "Collecting baseline…". A change can be reported from the second run onwards.
  • Until readings cover the whole comparison period, the check compares with the first stored reading, so the period actually compared is shorter than configured.
  • Readings are stored per comparison period. If you change Comparison period (hours), measurement starts over.

See also: Set up alerts for a check

FAQ

The value describes the change in free space: a negative value means less free space, so space was consumed. A positive value means more free space, so space was freed.

For example, if free space drops from 90 GB to 65 GB, the change is −25 GB — 25 GB was consumed, not freed.

Whether this produces a warning or critical result depends on the direction selected under Alert on and your thresholds.