{ "algorithms": { "GradientBoostingRegressor": { "RMSE": 0, "modelId": "", "rSquared": 0, "recommended": false }, "LinearRegression": { "RMSE": 0, "modelId": "", "rSquared": 0, "recommended": false }, "LogisticRegression": { "accuracy": 0, "f1_score": 0, "modelId": "", "precision": 0, "recall": 0, "recommended": false }, "RandomForestRegressor": { "RMSE": 0, "modelId": "", "rSquared": 0, "recommended": false } }, "description": "Manages the mailbox databases on the server.", "enabled": true, "entity_rules": [], "key": "da-itsi-cp-microsoft-exchange-msexchangeis", "kpis": [ { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "avg", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": null, "severity_color": "#B50101", "severity_color_light": "#E5A6A6", "severity_label": "critical", "severity_label_localized": null, "severity_value": 6.0, "threshold_value": 0.0 }, { "dynamic_param": null, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": null, "severity_value": 5.0, "threshold_value": 20.0 }, { "dynamic_param": null, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": null, "severity_value": 4.0, "threshold_value": 40.0 }, { "dynamic_param": null, "severity_color": "#FFE98C", "severity_color_light": "#FFF4C5", "severity_label": "low", "severity_label_localized": null, "severity_value": 3.0, "threshold_value": 60.0 }, { "dynamic_param": null, "severity_color": "#99D18B", "severity_color_light": "#DCEFD7", "severity_label": "normal", "severity_label_localized": null, "severity_value": 2.0, "threshold_value": 80.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "1", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": 0.999, "anomaly_detection_training_window": "-7d", "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchangeis)`", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "", "field": "", "object": "", "owner_field": "" }, "datamodel_filter": [], "datamodel_filter_clauses": null, "description": "", "enabled": false, "entity_filter_field": "", "entity_split_field": "", "entity_statop": "avg", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": null, "severity_color": "#B50101", "severity_color_light": "#E5A6A6", "severity_label": "critical", "severity_label_localized": null, "severity_value": 6.0, "threshold_value": 0.0 }, { "dynamic_param": null, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": null, "severity_value": 5.0, "threshold_value": 20.0 }, { "dynamic_param": null, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": null, "severity_value": 4.0, "threshold_value": 40.0 }, { "dynamic_param": null, "severity_color": "#FFE98C", "severity_color_light": "#FFF4C5", "severity_label": "low", "severity_label_localized": null, "severity_value": 3.0, "threshold_value": 60.0 }, { "dynamic_param": null, "severity_color": "#99D18B", "severity_color_light": "#DCEFD7", "severity_label": "normal", "severity_label_localized": null, "severity_value": 2.0, "threshold_value": 80.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": false, "key": "SHKPI-da-itsi-cp-microsoft-exchange-msexchangeis", "kpi_base_search": "", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchangeis)` | stats latest(health_score) AS aggregate", "search_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchangeis)` | stats latest(health_score) AS aggregate", "search_alert": "", "search_alert_earliest": "15", "search_alert_entities": "", "search_buckets": "", "search_entities": null, "search_occurrences": 1.0, "search_time_compare": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchangeis)` [| stats count | addinfo | eval search= \"earliest=\" + tostring(info_min_time-(info_max_time-info_min_time))+ \" latest=\" + tostring(info_max_time) |fields search] | addinfo | eval bucket=if(_time0, \"increase\", if(window_delta < 0, \"decrease\", \"none\"))", "search_time_series": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchangeis)` | timechart avg(health_score) AS aggregate", "search_time_series_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchangeis)` | timechart avg(health_score) AS aggregate", "search_time_series_entities": "", "search_type": "adhoc", "service_title": "MSExchangeIS", "threshold_eval": "", "threshold_field": "aggregate", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#AED3E5", "base_severity_color_light": "#E3F0F6", "base_severity_label": "info", "base_severity_value": 1.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "ServiceHealthScore", "trending_ad": { "sensitivity": 8 }, "type": "service_health", "tz_offset": null, "unit": "", "urgency": 11.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "avg", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#F26A35", "base_severity_color_light": "#FBCBB9", "base_severity_label": "high", "base_severity_value": 5.0, "gauge_max": 550, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 550.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 50.0 }, { "dynamic_param": 0.0, "severity_color": "#99D18B", "severity_color_light": "#DCEFD7", "severity_label": "normal", "severity_label_localized": "Normal", "severity_value": 2.0, "threshold_value": 500.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Client Backoff/sec\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Mailboxes", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchangeIS-RPC Client Backoff/sec" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Client Backoff/sec\"", "description": "Indicates the rate at which client backoffs are occurring. Higher values may indicate that the server may be incurring a higher load resulting in an increase in overall averaged RPC latencies, causing client throttling to occur. This can also occur when certain client user actions are being performed. Depending on what the client is doing and the rate at which RPC operations are occurring, it may be normal to see backoffs occurring.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "avg", "entity_thresholds": { "base_severity_color": "#F26A35", "base_severity_color_light": "#FBCBB9", "base_severity_label": "high", "base_severity_value": 5.0, "gauge_max": 550, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 550.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 50.0 }, { "dynamic_param": 0.0, "severity_color": "#99D18B", "severity_color_light": "#DCEFD7", "severity_label": "normal", "severity_label_localized": "Normal", "severity_value": 2.0, "threshold_value": 500.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-91bd3b6a090935a1594beb52", "kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Client Backoff/sec\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Client Backoff/sec\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-91bd3b6a090935a1594beb52, true, true, true)` | eval kpi=\"Client RPC Backoffs/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Client Backoff/sec\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-91bd3b6a090935a1594beb52)`", "search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Client Backoff/sec\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-91bd3b6a090935a1594beb52, true, true, true)` | eval kpi=\"Client RPC Backoffs/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Client Backoff/sec\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-91bd3b6a090935a1594beb52)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Client Backoff/sec\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-91bd3b6a090935a1594beb52)`", "search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Client Backoff/sec\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-91bd3b6a090935a1594beb52)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Client Backoff/sec\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-91bd3b6a090935a1594beb52)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Client Backoff/sec\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchangeIS", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Client RPC Backoffs/sec", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 5.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "max", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 110, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 110.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 1.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 100.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Client: RPCs Failed/sec\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Mailboxes", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchangeIS-Client: RPCs Failed/sec" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Client: RPCs Failed/sec\"", "description": "Shows the client-reported rate of failed RPCs (since the store was started).", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "max", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 110, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 110.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 1.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 100.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-da8b9d55baaf0aea0e2d8f5e", "kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Client: RPCs Failed/sec\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Client: RPCs Failed/sec\" | `aggregate_raw_into_entity(max, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-da8b9d55baaf0aea0e2d8f5e, true, true, true)` | eval kpi=\"Client RPCs Operations Failed/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Client: RPCs Failed/sec\" | `aggregate_raw_into_single_value(max, max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-da8b9d55baaf0aea0e2d8f5e)`", "search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Client: RPCs Failed/sec\" | `aggregate_raw_into_entity(max, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-da8b9d55baaf0aea0e2d8f5e, true, true, true)` | eval kpi=\"Client RPCs Operations Failed/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Client: RPCs Failed/sec\" | `aggregate_raw_into_single_value(max, max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-da8b9d55baaf0aea0e2d8f5e)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Client: RPCs Failed/sec\" | `aggregate_raw_and_compare(max, max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-da8b9d55baaf0aea0e2d8f5e)`", "search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Client: RPCs Failed/sec\" | `aggregate_raw_into_entity_time_series(max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-da8b9d55baaf0aea0e2d8f5e)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Client: RPCs Failed/sec\" | `aggregate_raw_into_entity_time_series(max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-da8b9d55baaf0aea0e2d8f5e)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Client: RPCs Failed/sec\" | `aggregate_raw_into_limited_entity_time_series(max, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchangeIS", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Client RPCs Operations Failed/sec", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 5.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "avg", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 55000, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 55000.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 25000.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 50000.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-User Count\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Mailboxes", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchangeIS-User Count" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-User Count\"", "description": "Shows the number of users connected to the information store. Used to determine current user load.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "avg", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 55000, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 55000.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 25000.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 50000.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-dadf0015a157f420189b3119", "kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-User Count\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-User Count\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-dadf0015a157f420189b3119, true, true, true)` | eval kpi=\"Mailbox User Count\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-User Count\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-dadf0015a157f420189b3119)`", "search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-User Count\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-dadf0015a157f420189b3119, true, true, true)` | eval kpi=\"Mailbox User Count\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-User Count\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-dadf0015a157f420189b3119)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-User Count\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-dadf0015a157f420189b3119)`", "search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-User Count\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-dadf0015a157f420189b3119)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-User Count\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-dadf0015a157f420189b3119)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-User Count\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchangeIS", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Mailbox User Count", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 5.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "avg", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 55000, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 55000.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 25000.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 50000.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Operations/sec\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Mailboxes", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchangeIS-RPC Operations/sec" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Operations/sec\"", "description": "Indicates the current number of RPC operations occurring per second.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "avg", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 55000, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 55000.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 25000.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 50000.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-b2d87994e3da1657fa47e72f", "kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Operations/sec\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Operations/sec\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-b2d87994e3da1657fa47e72f, true, true, true)` | eval kpi=\"RPC Operations/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Operations/sec\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-b2d87994e3da1657fa47e72f)`", "search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Operations/sec\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-b2d87994e3da1657fa47e72f, true, true, true)` | eval kpi=\"RPC Operations/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Operations/sec\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-b2d87994e3da1657fa47e72f)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Operations/sec\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-b2d87994e3da1657fa47e72f)`", "search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Operations/sec\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-b2d87994e3da1657fa47e72f)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Operations/sec\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-b2d87994e3da1657fa47e72f)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Operations/sec\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchangeIS", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "RPC Operations/sec", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 5.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "max", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 55, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 10.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 50.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow QP Threads\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Mailboxes", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchangeIS-Slow QP Threads" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow QP Threads\"", "description": "Shows the number of query processor threads currently running queries that aren't optimized.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "max", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 55, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 10.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 50.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-1ff9fdccaef385170e5fd7c6", "kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow QP Threads\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow QP Threads\" | `aggregate_raw_into_entity(max, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-1ff9fdccaef385170e5fd7c6, true, true, true)` | eval kpi=\"Slow Queue Proc. Threads\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow QP Threads\" | `aggregate_raw_into_single_value(max, max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-1ff9fdccaef385170e5fd7c6)`", "search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow QP Threads\" | `aggregate_raw_into_entity(max, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-1ff9fdccaef385170e5fd7c6, true, true, true)` | eval kpi=\"Slow Queue Proc. Threads\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow QP Threads\" | `aggregate_raw_into_single_value(max, max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-1ff9fdccaef385170e5fd7c6)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow QP Threads\" | `aggregate_raw_and_compare(max, max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-1ff9fdccaef385170e5fd7c6)`", "search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow QP Threads\" | `aggregate_raw_into_entity_time_series(max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-1ff9fdccaef385170e5fd7c6)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow QP Threads\" | `aggregate_raw_into_entity_time_series(max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-1ff9fdccaef385170e5fd7c6)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow QP Threads\" | `aggregate_raw_into_limited_entity_time_series(max, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchangeIS", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Slow Queue Proc. Threads", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 5.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "max", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 55, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 10.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 50.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow Search Threads\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Mailboxes", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchangeIS-Slow Search Threads" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow Search Threads\"", "description": "Shows the number of search threads currently running queries that aren't optimized.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "max", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 55, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 10.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 50.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-e84c108e295ee2540e9498f9", "kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow Search Threads\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow Search Threads\" | `aggregate_raw_into_entity(max, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-e84c108e295ee2540e9498f9, true, true, true)` | eval kpi=\"Slow Search Threads\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow Search Threads\" | `aggregate_raw_into_single_value(max, max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-e84c108e295ee2540e9498f9)`", "search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow Search Threads\" | `aggregate_raw_into_entity(max, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-e84c108e295ee2540e9498f9, true, true, true)` | eval kpi=\"Slow Search Threads\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow Search Threads\" | `aggregate_raw_into_single_value(max, max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-e84c108e295ee2540e9498f9)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow Search Threads\" | `aggregate_raw_and_compare(max, max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-e84c108e295ee2540e9498f9)`", "search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow Search Threads\" | `aggregate_raw_into_entity_time_series(max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-e84c108e295ee2540e9498f9)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow Search Threads\" | `aggregate_raw_into_entity_time_series(max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-e84c108e295ee2540e9498f9)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-Slow Search Threads\" | `aggregate_raw_into_limited_entity_time_series(max, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchangeIS", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Slow Search Threads", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 5.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "avg", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 1100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "Microsoft_Exchange_Health.componentValue", "render_boundary_max": 1100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 11.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 1000.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Averaged Latency\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Mailboxes", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchangeIS-RPC Averaged Latency" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Averaged Latency\"", "description": "Indicates the RPC latency, in ms, averaged for all operations in the last 1,024 packets.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "avg", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 1100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "datamodel", "render_boundary_max": 1100.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 11.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 1000.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-3768438d42438d83d68a559b", "kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Averaged Latency\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Averaged Latency\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-3768438d42438d83d68a559b, true, true, true)` | eval kpi=\"Store RPC Avg. Latency\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Averaged Latency\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-3768438d42438d83d68a559b)`", "search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Averaged Latency\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-3768438d42438d83d68a559b, true, true, true)` | eval kpi=\"Store RPC Avg. Latency\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Averaged Latency\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-3768438d42438d83d68a559b)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Averaged Latency\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-3768438d42438d83d68a559b)`", "search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Averaged Latency\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-3768438d42438d83d68a559b)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Averaged Latency\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-3768438d42438d83d68a559b)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Averaged Latency\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchangeIS", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Store RPC Avg. Latency", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "ms", "urgency": 5.0, "use_time_policies": false }, { "adaptive_thresholding_training_window": "-7d", "adaptive_thresholds_is_enabled": false, "aggregate_eval": "", "aggregate_statop": "max", "aggregate_threshold_alert_enabled": false, "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 550, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "Microsoft_Exchange_Health.componentValue", "render_boundary_max": 550.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 70.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 500.0 } ] }, "aggregate_thresholds_alert_enabled": false, "aggregate_thresholds_custom_alert_enabled": false, "aggregate_thresholds_custom_alert_rules": [], "alert_eval": "", "alert_lag": "30", "alert_on": "both", "alert_period": "5", "anomaly_detection_alerting_enabled": false, "anomaly_detection_is_enabled": false, "anomaly_detection_sensitivity": null, "anomaly_detection_training_window": null, "backfill_earliest_time": "-7d", "backfill_enabled": false, "base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Requests\"", "base_search_id": null, "base_search_metric": null, "cohesive_ad": { "sensitivity": 8 }, "cohesive_anomaly_detection_is_enabled": false, "datamodel": { "datamodel": "Microsoft_Exchange", "field": "componentValue", "object": "Mailboxes", "owner_field": "Microsoft_Exchange_Health.componentValue" }, "datamodel_filter": [ { "field": "Microsoft_Exchange_Health.componentId", "operator": "=", "value": "Perfmon-MSExchangeIS-RPC Requests" } ], "datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Requests\"", "description": "Indicates the overall RPC requests currently executing within the information store process.", "enabled": true, "entity_filter_field": "host", "entity_split_field": "host", "entity_statop": "max", "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 550, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "datamodel", "render_boundary_max": 550.0, "render_boundary_min": 0.0, "threshold_levels": [ { "dynamic_param": 0.0, "severity_color": "#FCB64E", "severity_color_light": "#FEE6C1", "severity_label": "medium", "severity_label_localized": "Medium", "severity_value": 4.0, "threshold_value": 70.0 }, { "dynamic_param": 0.0, "severity_color": "#F26A35", "severity_color_light": "#FBCBB9", "severity_label": "high", "severity_label_localized": "High", "severity_value": 5.0, "threshold_value": 500.0 } ] }, "fill_gaps": "null_value", "gap_custom_alert_value": 0.0, "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-microsoft-exchange-ba6e3c0dd635363057d6fe15", "kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Requests\"", "kpi_template_kpi_id": "", "kpi_threshold_template_id": "", "metric_qualifier": null, "metric_search_spec": { "metric_index": "", "metric_name": "" }, "search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Requests\" | `aggregate_raw_into_entity(max, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-ba6e3c0dd635363057d6fe15, true, true, true)` | eval kpi=\"Store RPC Requests\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Requests\" | `aggregate_raw_into_single_value(max, max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-ba6e3c0dd635363057d6fe15)`", "search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Requests\" | `aggregate_raw_into_entity(max, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchangeis\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-ba6e3c0dd635363057d6fe15, true, true, true)` | eval kpi=\"Store RPC Requests\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchangeis\" | `assess_urgency` | `gettime`", "search_alert_earliest": "5", "search_alert_entities": "", "search_buckets": "", "search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Requests\" | `aggregate_raw_into_single_value(max, max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-ba6e3c0dd635363057d6fe15)`", "search_occurrences": 1.0, "search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Requests\" | `aggregate_raw_and_compare(max, max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-ba6e3c0dd635363057d6fe15)`", "search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Requests\" | `aggregate_raw_into_entity_time_series(max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-ba6e3c0dd635363057d6fe15)`", "search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Requests\" | `aggregate_raw_into_entity_time_series(max, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchangeis, da-itsi-cp-microsoft-exchange-ba6e3c0dd635363057d6fe15)`", "search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"Perfmon-MSExchangeIS-RPC Requests\" | `aggregate_raw_into_limited_entity_time_series(max, Microsoft_Exchange_Health.componentValue, \"host\", 5)`", "search_type": "datamodel", "service_title": "MSExchangeIS", "threshold_eval": "", "threshold_field": "Microsoft_Exchange_Health.componentValue", "time_policies": { "policies": { "default_policy": { "aggregate_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "entity_thresholds": { "base_severity_color": "#99D18B", "base_severity_color_light": "#DCEFD7", "base_severity_label": "normal", "base_severity_value": 2.0, "gauge_max": 100, "gauge_min": 0, "is_max_static": false, "is_min_static": true, "metric_field": "count", "render_boundary_max": 100.0, "render_boundary_min": 0.0, "threshold_levels": [] }, "policy_type": "static", "time_blocks": [], "title": "Default" } } }, "title": "Store RPC Requests", "trending_ad": { "sensitivity": 8 }, "type": "kpis_primary", "tz_offset": null, "unit": "", "urgency": 5.0, "use_time_policies": false } ], "service_tags": { "tags": [], "template_tags": [] }, "service_template_id": "", "services_depending_on_me": [ { "kpis_depending_on": [ "SHKPI-da-itsi-cp-microsoft-exchange-msexchangeis" ], "service_id": "da-itsi-cp-microsoft-exchange-msexchange-information-store" } ], "services_depends_on": [], "team_id": "default_itsi_security_group", "title": "MSExchangeIS", "version": "0.0.33" }