You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
95 lines
3.9 KiB
95 lines
3.9 KiB
[itsi-cp-nix-indexes]
|
|
definition = index=os
|
|
|
|
[monitoring_unix_cpu_wrapper]
|
|
definition = `monitoring_unix_cpu_recommended`
|
|
iseval = 0
|
|
|
|
[monitoring_unix_cpu_events]
|
|
definition = search `itsi-cp-nix-indexes` source=cpu CPU=all
|
|
iseval = 0
|
|
|
|
[monitoring_unix_cpu_recommended]
|
|
definition = mstats latest(cpu_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype=cpu_metric CPU=all by host span=30s
|
|
iseval = 0
|
|
|
|
[monitoring_unix_cpu_mixed_mode_TRUNCATED_RESULTS]
|
|
definition = union \
|
|
[ search `itsi-cp-nix-indexes` source=cpu CPU=all] \
|
|
[|mstats latest(cpu_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype=cpu_metric CPU=all by host span=30s]
|
|
iseval = 0
|
|
|
|
[monitoring_unix_df_wrapper]
|
|
definition = `monitoring_unix_df_recommended`
|
|
iseval = 0
|
|
|
|
[monitoring_unix_df_events]
|
|
definition = search `itsi-cp-nix-indexes` source=df Type!=nfs*\
|
|
| where NOT match(FreeMBytes,"unknown")\
|
|
| eval FreePct-{MountedOn}=PercentFreeSpace\
|
|
| eval FreeMB-{MountedOn}=FreeMBytes\
|
|
| eval FreeMB-Other=if(in(MountedOn,"/","/opt","/boot"),null(), FreeMBytes)\
|
|
| eval FreePct-Other=if(in(MountedOn,"/","/opt","/boot"),null(), PercentFreeSpace)
|
|
iseval = 0
|
|
|
|
[monitoring_unix_df_recommended]
|
|
definition = mstats latest(df_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype=df_metric Type!=nfs* by host, MountedOn span=30s\
|
|
| eval FreePct-{MountedOn}=100-UsePct\
|
|
| eval FreeMB-{MountedOn}=round(Avail_KB/1024,1)\
|
|
| eval FreeMB-Other=if(in(MountedOn,"/","/opt","/boot"),null(), round(Avail_KB/1024,1))\
|
|
| eval FreePct-Other=if(in(MountedOn,"/","/opt","/boot"),null(), 100-UsePct)
|
|
iseval = 0
|
|
|
|
[monitoring_unix_df_mixed_mode_TRUNCATED_RESULTS]
|
|
definition = union\
|
|
[ search `itsi-cp-nix-indexes` source=df Type!=nfs*\
|
|
| where NOT match(FreeMBytes,"unknown")\
|
|
| eval FreePct-{MountedOn}=PercentFreeSpace\
|
|
| eval FreeMB-{MountedOn}=FreeMBytes\
|
|
| eval FreeMB-Other=if(in(MountedOn,"/","/opt","/boot"),null(), FreeMBytes)\
|
|
| eval FreePct-Other=if(in(MountedOn,"/","/opt","/boot"),null(), PercentFreeSpace)]\
|
|
[| mstats latest(df_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype=df_metric Type!=nfs* by host, MountedOn span=30s\
|
|
| eval FreePct-{MountedOn}=100-UsePct\
|
|
| eval FreeMB-{MountedOn}=round(Avail_KB/1024,1)\
|
|
| eval FreeMB-Other=if(in(MountedOn,"/","/opt","/boot"),null(), round(Avail_KB/1024,1))\
|
|
| eval FreePct-Other=if(in(MountedOn,"/","/opt","/boot"),null(), 100-UsePct)]
|
|
iseval = 0
|
|
|
|
[monitoring_unix_iostat_wrapper]
|
|
definition = `monitoring_unix_iostat_recommended`
|
|
iseval = 0
|
|
|
|
[monitoring_unix_iostat_events]
|
|
definition = search `itsi-cp-nix-indexes` sourcetype=iostat | eval hostdev=host.":".Device
|
|
iseval = 0
|
|
|
|
[monitoring_unix_iostat_recommended]
|
|
definition = mstats latest(iostat_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype="iostat_metric" by host, Device span=30s\
|
|
| eval hostdev=host.":".Device
|
|
iseval = 0
|
|
|
|
[monitoring_unix_iostat_mixed_mode_TRUNCATED_RESULTS]
|
|
definition = union\
|
|
[ search `itsi-cp-nix-indexes` sourcetype=iostat\
|
|
| eval hostdev=host.":".Device]\
|
|
[| mstats latest(iostat_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype="iostat_metric" by host, Device span=30s\
|
|
| eval hostdev=host.":".Device]
|
|
iseval = 0
|
|
|
|
[monitoring_unix_vmstat_wrapper]
|
|
definition = `monitoring_unix_vmstat_recommended`
|
|
iseval = 0
|
|
|
|
[monitoring_unix_vmstat_events]
|
|
definition = search `itsi-cp-nix-indexes` source=vmstat
|
|
iseval = 0
|
|
|
|
[monitoring_unix_vmstat_recommended]
|
|
definition = mstats latest(vmstat_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype="vmstat_metric" by host span=30s
|
|
iseval = 0
|
|
|
|
[monitoring_unix_vmstat_mixed_mode_TRUNCATED_RESULTS]
|
|
definition = union\
|
|
[ search `itsi-cp-nix-indexes` source=vmstat]\
|
|
[| mstats latest(vmstat_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype="vmstat_metric" by host span=30s]
|
|
iseval = 0 |