You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1354 lines
79 KiB
1354 lines
79 KiB
{
|
|
"algorithms": {
|
|
"GradientBoostingRegressor": {
|
|
"RMSE": 0,
|
|
"modelId": "",
|
|
"rSquared": 0,
|
|
"recommended": false
|
|
},
|
|
"LinearRegression": {
|
|
"RMSE": 0,
|
|
"modelId": "",
|
|
"rSquared": 0,
|
|
"recommended": false
|
|
},
|
|
"LogisticRegression": {
|
|
"accuracy": 0,
|
|
"f1_score": 0,
|
|
"modelId": "",
|
|
"precision": 0,
|
|
"recall": 0,
|
|
"recommended": false
|
|
},
|
|
"RandomForestRegressor": {
|
|
"RMSE": 0,
|
|
"modelId": "",
|
|
"rSquared": 0,
|
|
"recommended": false
|
|
}
|
|
},
|
|
"description": "The PhysicalDisk service consists of KPI's that monitor hard or fixed disk drives. Disks are used to store file, program, and paging data. They are read to retrieve these items, and are written to record changes to them. The values of physical disk KPI's are sums of the values of the logical disks (or partitions) into which they are divided.",
|
|
"enabled": true,
|
|
"entity_rules": [],
|
|
"key": "da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk",
|
|
"kpis": [
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": null,
|
|
"severity_value": 6.0,
|
|
"threshold_value": 0.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#F26A35",
|
|
"severity_color_light": "#FBCBB9",
|
|
"severity_label": "high",
|
|
"severity_label_localized": null,
|
|
"severity_value": 5.0,
|
|
"threshold_value": 20.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FCB64E",
|
|
"severity_color_light": "#FEE6C1",
|
|
"severity_label": "medium",
|
|
"severity_label_localized": null,
|
|
"severity_value": 4.0,
|
|
"threshold_value": 40.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FFE98C",
|
|
"severity_color_light": "#FFF4C5",
|
|
"severity_label": "low",
|
|
"severity_label_localized": null,
|
|
"severity_value": 3.0,
|
|
"threshold_value": 60.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": null,
|
|
"severity_value": 2.0,
|
|
"threshold_value": 80.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "1",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": 0.999,
|
|
"anomaly_detection_training_window": "-7d",
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk)`",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "",
|
|
"enabled": false,
|
|
"entity_filter_field": "",
|
|
"entity_split_field": "",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": null,
|
|
"severity_value": 6.0,
|
|
"threshold_value": 0.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#F26A35",
|
|
"severity_color_light": "#FBCBB9",
|
|
"severity_label": "high",
|
|
"severity_label_localized": null,
|
|
"severity_value": 5.0,
|
|
"threshold_value": 20.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FCB64E",
|
|
"severity_color_light": "#FEE6C1",
|
|
"severity_label": "medium",
|
|
"severity_label_localized": null,
|
|
"severity_value": 4.0,
|
|
"threshold_value": 40.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FFE98C",
|
|
"severity_color_light": "#FFF4C5",
|
|
"severity_label": "low",
|
|
"severity_label_localized": null,
|
|
"severity_value": 3.0,
|
|
"threshold_value": 60.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": null,
|
|
"severity_value": 2.0,
|
|
"threshold_value": 80.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": false,
|
|
"key": "SHKPI-da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk",
|
|
"kpi_base_search": "",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk)` | stats latest(health_score) AS aggregate",
|
|
"search_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk)` | stats latest(health_score) AS aggregate",
|
|
"search_alert": "",
|
|
"search_alert_earliest": "15",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": null,
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk)` [| stats count | addinfo | eval search= \"earliest=\" + tostring(info_min_time-(info_max_time-info_min_time))+ \" latest=\" + tostring(info_max_time) |fields search] | addinfo | eval bucket=if(_time<info_max_time-((info_max_time-info_min_time)/2), \"last_window\", \"current_window\") | stats avg(health_score) AS aggregate BY bucket | reverse | delta aggregate AS window_delta | search bucket=current_window | eval window_direction=if(window_delta >0, \"increase\", if(window_delta < 0, \"decrease\", \"none\"))",
|
|
"search_time_series": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk)` | timechart avg(health_score) AS aggregate",
|
|
"search_time_series_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk)` | timechart avg(health_score) AS aggregate",
|
|
"search_time_series_entities": "",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_PhysicalDisk",
|
|
"threshold_eval": "",
|
|
"threshold_field": "aggregate",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#AED3E5",
|
|
"base_severity_color_light": "#E3F0F6",
|
|
"base_severity_label": "info",
|
|
"base_severity_value": 1.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#AED3E5",
|
|
"base_severity_color_light": "#E3F0F6",
|
|
"base_severity_label": "info",
|
|
"base_severity_value": 1.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "ServiceHealthScore",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "service_health",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 11.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 550,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 550.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": "Critical",
|
|
"severity_value": 6.0,
|
|
"threshold_value": 500.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_rules": [
|
|
{
|
|
"change_from": [
|
|
"high",
|
|
"medium",
|
|
"low",
|
|
"normal",
|
|
"info"
|
|
],
|
|
"change_to": "critical"
|
|
}
|
|
],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Read Time\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "The percentage of time the physical disk is spending time reading. The % Disk Read Time and % Disk Write Time counters can exaggerate disk time. This is because they report busy time based on the duration of the I/O request, which includes time spent in activities other than reading to or writing from the disk. It then sums up all busy time for all requests and divides it by the elapsed time of the sample interval. If multiple requests are in process at a time, the total request time is greater than the time of the sample interval; as a result, reported disk utilization can exceed actual utilization.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 550,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 550.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": "Critical",
|
|
"severity_value": 6.0,
|
|
"threshold_value": 500.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-5dc3ba0979b2cd3f5ef15e72",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Read Time\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Read Time\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-5dc3ba0979b2cd3f5ef15e72, true, true, true)` | eval kpi=\"% Disk Read Time\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Read Time\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-5dc3ba0979b2cd3f5ef15e72)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Read Time\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-5dc3ba0979b2cd3f5ef15e72, true, true, true)` | eval kpi=\"% Disk Read Time\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Read Time\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-5dc3ba0979b2cd3f5ef15e72)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Read Time\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-5dc3ba0979b2cd3f5ef15e72)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Read Time\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-5dc3ba0979b2cd3f5ef15e72)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Read Time\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-5dc3ba0979b2cd3f5ef15e72)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Read Time\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_PhysicalDisk",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "% Disk Read Time",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "%",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 770,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 770.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": "Critical",
|
|
"severity_value": 6.0,
|
|
"threshold_value": 700.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_rules": [
|
|
{
|
|
"change_from": [
|
|
"high",
|
|
"medium",
|
|
"low",
|
|
"normal",
|
|
"info"
|
|
],
|
|
"change_to": "critical"
|
|
}
|
|
],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Write Time\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "The percentage of time the physical disk is spending time writing. The % Disk Read Time and % Disk Write Time counters can exaggerate disk time. This is because they report busy time based on the duration of the I/O request, which includes time spent in activities other than reading to or writing from the disk. It then sums up all busy time for all requests and divides it by the elapsed time of the sample interval. If multiple requests are in process at a time, the total request time is greater than the time of the sample interval; as a result, reported disk utilization can exceed actual utilization.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 770,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 770.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": "Critical",
|
|
"severity_value": 6.0,
|
|
"threshold_value": 700.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-26e8737f470cee6b43290bea",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Write Time\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Write Time\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-26e8737f470cee6b43290bea, true, true, true)` | eval kpi=\"% Disk Write Time\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Write Time\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-26e8737f470cee6b43290bea)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Write Time\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-26e8737f470cee6b43290bea, true, true, true)` | eval kpi=\"% Disk Write Time\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Write Time\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-26e8737f470cee6b43290bea)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Write Time\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-26e8737f470cee6b43290bea)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Write Time\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-26e8737f470cee6b43290bea)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Write Time\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-26e8737f470cee6b43290bea)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Disk Write Time\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_PhysicalDisk",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "% Disk Write Time",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "%",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 3300,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 3300.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#F26A35",
|
|
"severity_color_light": "#FBCBB9",
|
|
"severity_label": "high",
|
|
"severity_label_localized": "High",
|
|
"severity_value": 5.0,
|
|
"threshold_value": 2000.0
|
|
},
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": "Critical",
|
|
"severity_value": 6.0,
|
|
"threshold_value": 3000.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_rules": [
|
|
{
|
|
"change_from": [
|
|
"high",
|
|
"medium",
|
|
"low",
|
|
"normal",
|
|
"info"
|
|
],
|
|
"change_to": "critical"
|
|
}
|
|
],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Reads/sec\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "The total number of individual disk IO read requests completed over a period of one second on the physical disk.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 3300,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 3300.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#F26A35",
|
|
"severity_color_light": "#FBCBB9",
|
|
"severity_label": "high",
|
|
"severity_label_localized": "High",
|
|
"severity_value": 5.0,
|
|
"threshold_value": 2000.0
|
|
},
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": "Critical",
|
|
"severity_value": 6.0,
|
|
"threshold_value": 3000.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-27ead5161692a7c32a054706",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Reads/sec\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Reads/sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-27ead5161692a7c32a054706, true, true, true)` | eval kpi=\"Disk Reads/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Reads/sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-27ead5161692a7c32a054706)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Reads/sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-27ead5161692a7c32a054706, true, true, true)` | eval kpi=\"Disk Reads/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Reads/sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-27ead5161692a7c32a054706)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Reads/sec\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-27ead5161692a7c32a054706)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Reads/sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-27ead5161692a7c32a054706)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Reads/sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-27ead5161692a7c32a054706)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Reads/sec\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_PhysicalDisk",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Disk Reads/sec",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "/sec",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 550,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 550.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": "Critical",
|
|
"severity_value": 6.0,
|
|
"threshold_value": 500.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Writes/sec\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "The total number of individual disk IO write requests completed over a period of one second on the physical disk.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 550,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 550.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": "Critical",
|
|
"severity_value": 6.0,
|
|
"threshold_value": 500.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-af0acf15d3f3b87cbb66c0c8",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Writes/sec\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Writes/sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-af0acf15d3f3b87cbb66c0c8, true, true, true)` | eval kpi=\"Disk Writes/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Writes/sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-af0acf15d3f3b87cbb66c0c8)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Writes/sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-af0acf15d3f3b87cbb66c0c8, true, true, true)` | eval kpi=\"Disk Writes/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Writes/sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-af0acf15d3f3b87cbb66c0c8)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Writes/sec\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-af0acf15d3f3b87cbb66c0c8)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Writes/sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-af0acf15d3f3b87cbb66c0c8)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Writes/sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-af0acf15d3f3b87cbb66c0c8)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Disk Writes/sec\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_PhysicalDisk",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Disk Writes/sec",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "/sec",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "min",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Free Space\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "Amount of physical disk space which is Free Space, calculated as a percentage of total physical disk space.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "min",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-d834d47d7c5a76b1b82eca11",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Free Space\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Free Space\" | `aggregate_raw_into_entity(min, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `aggregate_entity_into_service(min)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-d834d47d7c5a76b1b82eca11, true, true, true)` | eval kpi=\"Free Space %\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Free Space\" | `aggregate_raw_into_single_value(min, min, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-d834d47d7c5a76b1b82eca11)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Free Space\" | `aggregate_raw_into_entity(min, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `aggregate_entity_into_service(min)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-d834d47d7c5a76b1b82eca11, true, true, true)` | eval kpi=\"Free Space %\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Free Space\" | `aggregate_raw_into_single_value(min, min, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-d834d47d7c5a76b1b82eca11)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Free Space\" | `aggregate_raw_and_compare(min, min, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-d834d47d7c5a76b1b82eca11)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Free Space\" | `aggregate_raw_into_entity_time_series(min, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(min, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-d834d47d7c5a76b1b82eca11)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Free Space\" | `aggregate_raw_into_entity_time_series(min, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(min, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-d834d47d7c5a76b1b82eca11)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"% Free Space\" | `aggregate_raw_into_limited_entity_time_series(min, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_PhysicalDisk",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Free Space %",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "%min",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 550,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 550.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#F26A35",
|
|
"severity_color_light": "#FBCBB9",
|
|
"severity_label": "high",
|
|
"severity_label_localized": "High",
|
|
"severity_value": 5.0,
|
|
"threshold_value": 350.0
|
|
},
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": "Critical",
|
|
"severity_value": 6.0,
|
|
"threshold_value": 500.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_rules": [
|
|
{
|
|
"change_from": [
|
|
"high",
|
|
"medium",
|
|
"low",
|
|
"normal",
|
|
"info"
|
|
],
|
|
"change_to": "critical"
|
|
}
|
|
],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Split IO/Sec\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "Measures the rate of IO split due to file fragmentation on the physical disk. This happens if the IO request touches data on non-contiguous file segments.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 550,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 550.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#F26A35",
|
|
"severity_color_light": "#FBCBB9",
|
|
"severity_label": "high",
|
|
"severity_label_localized": "High",
|
|
"severity_value": 5.0,
|
|
"threshold_value": 350.0
|
|
},
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": "Critical",
|
|
"severity_value": 6.0,
|
|
"threshold_value": 500.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-938807a147fd661bc676b03c",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Split IO/Sec\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Split IO/Sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-938807a147fd661bc676b03c, true, true, true)` | eval kpi=\"Split IO/Sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Split IO/Sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-938807a147fd661bc676b03c)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Split IO/Sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-938807a147fd661bc676b03c, true, true, true)` | eval kpi=\"Split IO/Sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Split IO/Sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-938807a147fd661bc676b03c)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Split IO/Sec\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-938807a147fd661bc676b03c)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Split IO/Sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-938807a147fd661bc676b03c)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Split IO/Sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk, da-itsi-cp-microsoft-exchange-938807a147fd661bc676b03c)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon object=PhysicalDisk counter=\"Split IO/Sec\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_PhysicalDisk",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Split IO/Sec",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "/sec",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
}
|
|
],
|
|
"service_tags": {
|
|
"tags": [],
|
|
"template_tags": []
|
|
},
|
|
"service_template_id": "",
|
|
"services_depending_on_me": [
|
|
{
|
|
"kpis_depending_on": [
|
|
"SHKPI-da-itsi-cp-microsoft-exchange-msexchange-basemetrics-physicaldisk"
|
|
],
|
|
"service_id": "da-itsi-cp-microsoft-exchange-msexchange-basemetrics-group-disk"
|
|
}
|
|
],
|
|
"services_depends_on": [],
|
|
"team_id": "default_itsi_security_group",
|
|
"title": "MSExchange_BaseMetrics_PhysicalDisk",
|
|
"version": "0.0.33"
|
|
} |