It means that the root partition is almost full, I agree with you that the label is not descriptive enough.
Labels are defined here (dartagnan/athos/utils/utils.go at master · nethesis/dartagnan · GitHub), with something like:
T(".. something ..").
We just need change the something thing. I’d suggest this corrections:
- Boot partition → Boot partition free space
- Root partition → Root partition free space
- SWAP partition → SWAP free space
You can find everything inside the /var/log/messages, something like:
/var/log/messages-20180107:Dec 31 06:09:30 nethservice collectd[18129]: [WARNING] load:load: Host nethservice.nethesis.it, plugin load type load: Data source "midterm" is currently 5.330000. That is above the warning threshold of 5.000000.
/var/log/messages-20180107:Dec 31 06:19:20 nethservice collectd[18129]: [OK] load:load: Host nethservice.nethesis.it, plugin load type load: All data sources are within range again. Current value of "shortterm" is 1.050000.
Alert rules are the same applied on thousands of active systems and usually they spots some existing problems.
Of course, not every machine is the same and threshold could be adjusted (we have it on the roadmap but I can’t give you any hint on when it will be available).
You can check load spikes looking at collectd graphs and logs at the time when the alert was active.