{
    "alert_lag": 30,
    "alert_period": "5",
    "base_search": "| mstats avg(\"cpu.utilization\") as sa_cpu_utilization, sum(\"memory.free\") as sa_memory_free, avg(\"disk_ops.read\") as sa_disk_read, avg(\"disk_ops.write\") as sa_disk_write, avg(\"if_octets.rx\") as sa_network_receive, avg(\"if_octets.tx\") as sa_network_send, avg(\"if_errors.tx\") as sa_network_error_tx, avg(\"if_errors.rx\") as sa_network_error_rx where `itsi-cp-observability-indexes` AND cluster!=* by host.name span=15m | eval sa_memory_free_mb=sa_memory_free/1024/1024 | rename host.name as host_name | dedup host_name | table _time, host_name, sa_cpu_utilization, sa_memory_free_mb, sa_disk_read, sa_disk_write, sa_network_receive, sa_network_send, sa_network_error_tx, sa_network_error_rx",
    "description": "",
    "entity_filter_field": "host",
    "entity_split_field": "host_name",
    "is_filter_entities_to_service": false,
    "is_split_by_entity": true,
    "key": "da-itsi-cp-splunk-observability-sim-data-center-hosts",
    "metric_qualifier": "",
    "metrics": [
        {
            "aggregate_statop": "avg",
            "entity_statop": "avg",
            "fill_gaps": "null_value",
            "gap_custom_alert_value": "0",
            "gap_severity": "unknown",
            "gap_severity_color": "#CCCCCC",
            "gap_severity_color_light": "#EEEEEE",
            "gap_severity_value": "-1",
            "key": "cpu-utilization",
            "threshold_field": "sa_cpu_utilization",
            "title": "CPU Utilization",
            "unit": "%"
        },
        {
            "aggregate_statop": "avg",
            "entity_statop": "avg",
            "fill_gaps": "null_value",
            "gap_custom_alert_value": "0",
            "gap_severity": "unknown",
            "gap_severity_color": "#CCCCCC",
            "gap_severity_color_light": "#EEEEEE",
            "gap_severity_value": "-1",
            "key": "disk-read-iops",
            "threshold_field": "sa_disk_read",
            "title": "Disk Read IOps",
            "unit": ""
        },
        {
            "aggregate_statop": "avg",
            "entity_statop": "avg",
            "fill_gaps": "null_value",
            "gap_custom_alert_value": "0",
            "gap_severity": "unknown",
            "gap_severity_color": "#CCCCCC",
            "gap_severity_color_light": "#EEEEEE",
            "gap_severity_value": "-1",
            "key": "disk-write-iops",
            "threshold_field": "sa_disk_write",
            "title": "Disk Write IOps",
            "unit": ""
        },
        {
            "aggregate_statop": "avg",
            "entity_statop": "avg",
            "fill_gaps": "null_value",
            "gap_custom_alert_value": "0",
            "gap_severity": "unknown",
            "gap_severity_color": "#CCCCCC",
            "gap_severity_color_light": "#EEEEEE",
            "gap_severity_value": "-1",
            "key": "memory-free",
            "threshold_field": "sa_memory_free_mb",
            "title": "Memory Free",
            "unit": "mb"
        },
        {
            "aggregate_statop": "avg",
            "entity_statop": "avg",
            "fill_gaps": "null_value",
            "gap_custom_alert_value": "0",
            "gap_severity": "unknown",
            "gap_severity_color": "#CCCCCC",
            "gap_severity_color_light": "#EEEEEE",
            "gap_severity_value": "-1",
            "key": "network-rx",
            "threshold_field": "sa_network_receive",
            "title": "Network Rx",
            "unit": ""
        },
        {
            "aggregate_statop": "avg",
            "entity_statop": "avg",
            "fill_gaps": "null_value",
            "gap_custom_alert_value": "0",
            "gap_severity": "unknown",
            "gap_severity_color": "#CCCCCC",
            "gap_severity_color_light": "#EEEEEE",
            "gap_severity_value": "-1",
            "key": "network-tx",
            "threshold_field": "sa_network_send",
            "title": "Network Tx",
            "unit": ""
        }
    ],
    "search_alert_earliest": "15",
    "title": "SIM_data_center_hosts",
    "version": "0.0.38"
}