Disk Full at 2 AM? My Autonomous System Catches It at 6 AM. 100+ Disks.

Every morning at six. Before anyone wakes up. Before the first coffee. A Logic App runs KQL across over one hundred production disks. Windows. Linux. By the time the team opens their laptops, the report is sitting in their inbox. Building an autonomous disk monitoring system - from reactive alerts to proactive daily reports with trending data and smart routing. The old pattern: disk fills up at 2 AM, alert fires, someone wakes up, scrambles to free space, resolves the ticket, goes back to sleep, repeat next week. No trending, no forecasting, just reactive firefighting. And in a mixed estate with Windows and Linux machines plus NFS mounts throwing false positives, figuring out what is real is half the battle. The new architecture flips the whole thing: Logic App triggers at 6 AM, KQL queries run against Log Analytics with Windows and Linux on separate paths, NFS mounts filtered out automatically so they do not pollute results. Two routing lanes based on thresholds: above 90% sends an immediate alert to on-call with a high-priority ticket and escalation chain, above 75% lands in the daily trending report so the team can plan and fix it before it ever becomes an incident. This is…