{ "algorithms": { "GradientBoostingRegressor": { "RMSE": 0, "modelId": "", "rSquared": 0, "recommended": false }, "LinearRegression": { "RMSE": 0, "modelId": "", "rSquared": 0, "recommended": false }, "LogisticRegression": { "accuracy": 0, "f1_score": 0, "modelId": "", "precision": 0, "recall": 0, "recommended": false }, "RandomForestRegressor": { "RMSE": 0, "modelId": "", "rSquared": 0, "recommended": false } }, "description": "Monitors the activity of the MS Exchange Transport Database.", "enabled": true, "entity_rules": [], "key": "da-itsi-cp-microsoft-exchange-msexchange-transport-database", "kpis": [ { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "avg", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": null, "severity_color": "#B50101", "severity_color_light": "#E5A6A6", "severity_label": "critical", "severity_label_localized": null, "severity_value": 6.0, "threshold_value": 0.0 }, { "dynamic_param": null, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": null, "severity_value": 5.0, "threshold_value": 20.0 }, { "dynamic_param": null, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": null, "severity_value": 4.0, "threshold_value": 40.0 }, { "dynamic_param": null, "severity_color": "#FFE98C", "severity_color_light": "#FFF4C5", "severity_label": "low", "severity_label_localized": null, "severity_value": 3.0, "threshold_value": 60.0 }, { "dynamic_param": null, "severity_color": "#99D18B", "severity_color_light": "#DCEFD7", "severity_label": "normal", "severity_label_localized": null, "severity_value": 2.0, "threshold_value": 80.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "1", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": 0.999, "anomaly_detection_training_window": "-7d", "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-transport-database)`", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "", "enabled": false, "entity_filter_field": "", "entity_split_field": "", "entity_statop": "avg", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": null, "severity_color": "#B50101", "severity_color_light": "#E5A6A6", "severity_label": "critical", "severity_label_localized": null, "severity_value": 6.0, "threshold_value": 0.0 }, { "dynamic_param": null, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": null, "severity_value": 5.0, "threshold_value": 20.0 }, { "dynamic_param": null, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": null, "severity_value": 4.0, "threshold_value": 40.0 }, { "dynamic_param": null, "severity_color": "#FFE98C", "severity_color_light": "#FFF4C5", "severity_label": "low", "severity_label_localized": null, "severity_value": 3.0, "threshold_value": 60.0 }, { "dynamic_param": null, "severity_color": "#99D18B", "severity_color_light": "#DCEFD7", "severity_label": "normal", "severity_label_localized": null, "severity_value": 2.0, "threshold_value": 80.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": false, "key": "SHKPI-da-itsi-cp-microsoft-exchange-msexchange-transport-database", "kpi_base_search": "", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-transport-database)` | stats latest(health_score) AS aggregate", "search_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-transport-database)` | stats latest(health_score) AS aggregate", "search_alert": "", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": null, "search_occurrences": 1.0, "search_time_compare": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-transport-database)` [| stats count | addinfo | eval search= \"earliest=\" + tostring(info_min_time-(info_max_time-info_min_time))+ \" latest=\" + tostring(info_max_time) |fields search] | addinfo | eval bucket=if(_time0, \"increase\", if(window_delta < 0, \"decrease\", \"none\"))", "search_time_series": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-transport-database)` | timechart avg(health_score) AS aggregate", "search_time_series_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-transport-database)` | timechart avg(health_score) AS aggregate", "search_time_series_entities": "", "search_type": "adhoc", "service_title": "MSExchange_Transport_Database", "threshold_eval": "", "threshold_field": "aggregate", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "ServiceHealthScore", "trending_ad": { "sensitivity": 8 }, "type": "service_health", "tz_offset": null, "unit": "", "urgency": 11.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "avg", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 1100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "Microsoft_Exchange_Health.componentValue", "render_boundary_max": 1100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 100.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 1000.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Transport_Handling", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchange Database ==> Instances-I/O Database Reads/sec" }, { "field": "Microsoft_Exchange_Health.componentInstance", "operator": "=", "value": "edgetransport/Transport Mail Database" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "description": "Shows the rate of database read operations completed. Determines the current load. Compare values to historical baselines.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "avg", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 1100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "datamodel", "render_boundary_max": 1100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 100.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 1000.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-c3597da7c82efb96064a0f43", "kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-c3597da7c82efb96064a0f43, true, true, true)` | eval kpi=\"DB I/O Database Reads/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-c3597da7c82efb96064a0f43)`", "search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-c3597da7c82efb96064a0f43, true, true, true)` | eval kpi=\"DB I/O Database Reads/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-c3597da7c82efb96064a0f43)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-c3597da7c82efb96064a0f43)`", "search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-c3597da7c82efb96064a0f43)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-c3597da7c82efb96064a0f43)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchange_Transport_Database", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "DB I/O Database Reads/sec", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 5.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "avg", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 1100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "Microsoft_Exchange_Health.componentValue", "render_boundary_max": 1100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 100.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 1000.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Transport_Handling", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchange Database ==> Instances-I/O Database Writes/sec" }, { "field": "Microsoft_Exchange_Health.componentInstance", "operator": "=", "value": "edgetransport/Transport Mail Database" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "description": "Shows the rate of database write operations completed. Determines the current load. Compare values to historical baselines.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "avg", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 1100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "datamodel", "render_boundary_max": 1100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 100.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 1000.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-5a6797aa0f990da141048d14", "kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-5a6797aa0f990da141048d14, true, true, true)` | eval kpi=\"DB I/O Database Writes/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-5a6797aa0f990da141048d14)`", "search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-5a6797aa0f990da141048d14, true, true, true)` | eval kpi=\"DB I/O Database Writes/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-5a6797aa0f990da141048d14)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-5a6797aa0f990da141048d14)`", "search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-5a6797aa0f990da141048d14)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-5a6797aa0f990da141048d14)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Database Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchange_Transport_Database", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "DB I/O Database Writes/sec", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 5.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "avg", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 1100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "Microsoft_Exchange_Health.componentValue", "render_boundary_max": 1100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 100.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 1000.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Transport_Handling", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchange Database ==> Instances-I/O Log Reads/sec" }, { "field": "Microsoft_Exchange_Health.componentInstance", "operator": "=", "value": "edgetransport/Transport Mail Database" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "description": "Shows the rate of log file read operations completed. Determines the current load. Compare values to historical baselines.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "avg", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 1100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "datamodel", "render_boundary_max": 1100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 100.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 1000.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-dd38c59fdfa6cef2da9ee523", "kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-dd38c59fdfa6cef2da9ee523, true, true, true)` | eval kpi=\"DB I/O Log Reads/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-dd38c59fdfa6cef2da9ee523)`", "search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-dd38c59fdfa6cef2da9ee523, true, true, true)` | eval kpi=\"DB I/O Log Reads/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-dd38c59fdfa6cef2da9ee523)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-dd38c59fdfa6cef2da9ee523)`", "search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-dd38c59fdfa6cef2da9ee523)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-dd38c59fdfa6cef2da9ee523)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Reads/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchange_Transport_Database", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "DB I/O Log Reads/sec", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 5.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "avg", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 1100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "Microsoft_Exchange_Health.componentValue", "render_boundary_max": 1100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 100.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 1000.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Transport_Handling", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchange Database ==> Instances-I/O Log Writes/sec" }, { "field": "Microsoft_Exchange_Health.componentInstance", "operator": "=", "value": "edgetransport/Transport Mail Database" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "description": "Shows the rate of log file write operations completed. Determines the current load. Compare values to historical baselines.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "avg", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 1100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "datamodel", "render_boundary_max": 1100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 100.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 1000.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-2d0877b837bbf980bed44364", "kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-2d0877b837bbf980bed44364, true, true, true)` | eval kpi=\"DB I/O Log Writes/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-2d0877b837bbf980bed44364)`", "search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-2d0877b837bbf980bed44364, true, true, true)` | eval kpi=\"DB I/O Log Writes/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-2d0877b837bbf980bed44364)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-2d0877b837bbf980bed44364)`", "search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-2d0877b837bbf980bed44364)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-2d0877b837bbf980bed44364)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-I/O Log Writes/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchange_Transport_Database", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "DB I/O Log Writes/sec", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 5.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "avg", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 55, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "Microsoft_Exchange_Health.componentValue", "render_boundary_max": 55.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 10.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 50.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Generation Checkpoint Depth\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Transport_Handling", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchange Database ==> Instances-Log Generation Checkpoint Depth" }, { "field": "Microsoft_Exchange_Health.componentInstance", "operator": "=", "value": "edgetransport/Transport Mail Database" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Generation Checkpoint Depth\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "description": "Represents the amount of work (in count of log files) that needs to be redone or undone to the database files if the process fails.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "avg", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 55, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "datamodel", "render_boundary_max": 55.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 10.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 50.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-f15e6069d29b50cbea3455e5", "kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Generation Checkpoint Depth\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Generation Checkpoint Depth\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-f15e6069d29b50cbea3455e5, true, true, true)` | eval kpi=\"DB Log Generation Checkpoint Depth\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Generation Checkpoint Depth\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-f15e6069d29b50cbea3455e5)`", "search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Generation Checkpoint Depth\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-f15e6069d29b50cbea3455e5, true, true, true)` | eval kpi=\"DB Log Generation Checkpoint Depth\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Generation Checkpoint Depth\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-f15e6069d29b50cbea3455e5)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Generation Checkpoint Depth\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-f15e6069d29b50cbea3455e5)`", "search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Generation Checkpoint Depth\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-f15e6069d29b50cbea3455e5)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Generation Checkpoint Depth\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-f15e6069d29b50cbea3455e5)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Generation Checkpoint Depth\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchange_Transport_Database", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "DB Log Generation Checkpoint Depth", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 5.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "avg", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 110, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "Microsoft_Exchange_Health.componentValue", "render_boundary_max": 110.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 10.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 100.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Record Stalls/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Transport_Handling", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchange Database ==> Instances-Log Record Stalls/sec" }, { "field": "Microsoft_Exchange_Health.componentInstance", "operator": "=", "value": "edgetransport/Transport Mail Database" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Record Stalls/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "description": "Shows the number of log records that can't be added to the log buffers per second because they are full. If this counter is nonzero most of the time, the log buffer size may be a bottleneck.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "avg", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 110, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "datamodel", "render_boundary_max": 110.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 10.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 100.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-40156601a24ce6d750e39254", "kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Record Stalls/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Record Stalls/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-40156601a24ce6d750e39254, true, true, true)` | eval kpi=\"DB Log Record Stalls/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Record Stalls/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-40156601a24ce6d750e39254)`", "search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Record Stalls/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-40156601a24ce6d750e39254, true, true, true)` | eval kpi=\"DB Log Record Stalls/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Record Stalls/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-40156601a24ce6d750e39254)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Record Stalls/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-40156601a24ce6d750e39254)`", "search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Record Stalls/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-40156601a24ce6d750e39254)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Record Stalls/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-40156601a24ce6d750e39254)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Record Stalls/sec\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchange_Transport_Database", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "DB Log Record Stalls/sec", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 5.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "avg", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 55, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "Microsoft_Exchange_Health.componentValue", "render_boundary_max": 55.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 10.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 50.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Threads Waiting\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Transport_Handling", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchange Database ==> Instances-Log Threads Waiting" }, { "field": "Microsoft_Exchange_Health.componentInstance", "operator": "=", "value": "edgetransport/Transport Mail Database" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Threads Waiting\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "description": "Shows the number of threads waiting for their data to be written to the log to complete an update of the database. If this number is too high, the log may be a bottleneck.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "avg", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 55, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "datamodel", "render_boundary_max": 55.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 10.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 50.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-a58e2caac27842db6a32e78a", "kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Threads Waiting\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Threads Waiting\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-a58e2caac27842db6a32e78a, true, true, true)` | eval kpi=\"DB Log Threads Waiting\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Threads Waiting\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-a58e2caac27842db6a32e78a)`", "search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Threads Waiting\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-a58e2caac27842db6a32e78a, true, true, true)` | eval kpi=\"DB Log Threads Waiting\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Threads Waiting\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-a58e2caac27842db6a32e78a)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Threads Waiting\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-a58e2caac27842db6a32e78a)`", "search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Threads Waiting\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-a58e2caac27842db6a32e78a)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Threads Waiting\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-a58e2caac27842db6a32e78a)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Log Threads Waiting\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchange_Transport_Database", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "DB Log Threads Waiting", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 5.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "max", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 550, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "Microsoft_Exchange_Health.componentValue", "render_boundary_max": 550.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 200.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 500.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Version buckets allocated\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Transport_Handling", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchange Database ==> Instances-Version buckets allocated" }, { "field": "Microsoft_Exchange_Health.componentInstance", "operator": "=", "value": "edgetransport/Transport Mail Database" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Version buckets allocated\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "description": "Total number of version buckets allocated. Shows the default backpressure values as listed in the edgetransport.exe.config file.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "max", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 550, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "datamodel", "render_boundary_max": 550.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 200.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 500.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-0a8e4884b2bd98a55a4c0e59", "kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Version buckets allocated\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Version buckets allocated\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(max, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-0a8e4884b2bd98a55a4c0e59, true, true, true)` | eval kpi=\"DB Version Buckets Allocated\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Version buckets allocated\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(max, max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-0a8e4884b2bd98a55a4c0e59)`", "search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Version buckets allocated\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity(max, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-0a8e4884b2bd98a55a4c0e59, true, true, true)` | eval kpi=\"DB Version Buckets Allocated\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-database\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Version buckets allocated\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_single_value(max, max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-0a8e4884b2bd98a55a4c0e59)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Version buckets allocated\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_and_compare(max, max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-0a8e4884b2bd98a55a4c0e59)`", "search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Version buckets allocated\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-0a8e4884b2bd98a55a4c0e59)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Version buckets allocated\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_entity_time_series(max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-database, da-itsi-cp-microsoft-exchange-0a8e4884b2bd98a55a4c0e59)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchange Database ==> Instances-Version buckets allocated\" AND Microsoft_Exchange_Health.componentInstance=\"edgetransport/Transport Mail Database\" | `aggregate_raw_into_limited_entity_time_series(max, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchange_Transport_Database", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "DB Version Buckets Allocated", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 5.0, "use_time_policies": false } ], "service_tags": { "tags": [], "template_tags": [] }, "service_template_id": "", "services_depending_on_me": [ { "kpis_depending_on": [ "SHKPI-da-itsi-cp-microsoft-exchange-msexchange-transport-database" ], "service_id": "da-itsi-cp-microsoft-exchange-msexchange-transport-handling" } ], "services_depends_on": [], "team_id": "default_itsi_security_group", "title": "MSExchange_Transport_Database", "version": "0.0.33" }