Description

Each row is Windows Server SRUM SDP physical-disk telemetry with timestamp and disk-size value plus application and user identifiers where recorded. Use it to establish storage-resource context across observations. The mapping exposes aggregate size only and cannot identify partitions, files, or individual disk operations.

Timeline

Timeline Field	Data Field
Related User	user_id
Description	app_id

Fields

Output Name	Data Type	Description
incremental_id	Int	Auto-increment identifier of the SRUM record
timestamp	DateTime	Timestamp of the SRUM record
app_id	String	Identifier of the application
user_id	String	Identifier (SID) of the user
size_in_bytes	Int