sz_free and storage_used_percent fields are always present, so sz_used and sz_total can be calculated:
sourcetype=ontap:volume (source="volume-list-info-iter-start" OR source="volume-get-iter") | `CoalesceVolumeFields` | eval na_gb_used=`BytesToGigaBytes(sz_used)` | eval gb_free=`BytesToGigaBytes(sz_free)` | eval na_gb_total=`BytesToGigaBytes(sz_total)` | eval calc_total=100 * (sz_free / (100 - storage_used_percent)) | eval calc_gb_total=`BytesToGigaBytes(calc_total)` | eval calc_gb_used=calc_gb_total - gb_free | eval gb_total=if(na_gb_total == "Null", calc_gb_total, na_gb_total) | eval gb_used=if(na_gb_used == "Null", calc_gb_used, na_gb_used) | stats first(*) as * by host, name | table host, name, gb_free, gb_used, gb_total | stats sum(*) as * by host | eval percent_used=round(100*gb_used/gb_total,1)
... View more