You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
764 lines
44 KiB
764 lines
44 KiB
{
|
|
"algorithms": {
|
|
"GradientBoostingRegressor": {
|
|
"RMSE": 0,
|
|
"modelId": "",
|
|
"rSquared": 0,
|
|
"recommended": false
|
|
},
|
|
"LinearRegression": {
|
|
"RMSE": 0,
|
|
"modelId": "",
|
|
"rSquared": 0,
|
|
"recommended": false
|
|
},
|
|
"LogisticRegression": {
|
|
"accuracy": 0,
|
|
"f1_score": 0,
|
|
"modelId": "",
|
|
"precision": 0,
|
|
"recall": 0,
|
|
"recommended": false
|
|
},
|
|
"RandomForestRegressor": {
|
|
"RMSE": 0,
|
|
"modelId": "",
|
|
"rSquared": 0,
|
|
"recommended": false
|
|
}
|
|
},
|
|
"description": "The Processor service provides KPI's associated to CPU utilization on the servers.",
|
|
"enabled": true,
|
|
"entity_rules": [],
|
|
"key": "da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor",
|
|
"kpis": [
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": null,
|
|
"severity_value": 6.0,
|
|
"threshold_value": 0.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#F26A35",
|
|
"severity_color_light": "#FBCBB9",
|
|
"severity_label": "high",
|
|
"severity_label_localized": null,
|
|
"severity_value": 5.0,
|
|
"threshold_value": 20.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FCB64E",
|
|
"severity_color_light": "#FEE6C1",
|
|
"severity_label": "medium",
|
|
"severity_label_localized": null,
|
|
"severity_value": 4.0,
|
|
"threshold_value": 40.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FFE98C",
|
|
"severity_color_light": "#FFF4C5",
|
|
"severity_label": "low",
|
|
"severity_label_localized": null,
|
|
"severity_value": 3.0,
|
|
"threshold_value": 60.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": null,
|
|
"severity_value": 2.0,
|
|
"threshold_value": 80.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "1",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": 0.999,
|
|
"anomaly_detection_training_window": "-7d",
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor)`",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "",
|
|
"enabled": false,
|
|
"entity_filter_field": "",
|
|
"entity_split_field": "",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": null,
|
|
"severity_value": 6.0,
|
|
"threshold_value": 0.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#F26A35",
|
|
"severity_color_light": "#FBCBB9",
|
|
"severity_label": "high",
|
|
"severity_label_localized": null,
|
|
"severity_value": 5.0,
|
|
"threshold_value": 20.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FCB64E",
|
|
"severity_color_light": "#FEE6C1",
|
|
"severity_label": "medium",
|
|
"severity_label_localized": null,
|
|
"severity_value": 4.0,
|
|
"threshold_value": 40.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FFE98C",
|
|
"severity_color_light": "#FFF4C5",
|
|
"severity_label": "low",
|
|
"severity_label_localized": null,
|
|
"severity_value": 3.0,
|
|
"threshold_value": 60.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": null,
|
|
"severity_value": 2.0,
|
|
"threshold_value": 80.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": false,
|
|
"key": "SHKPI-da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor",
|
|
"kpi_base_search": "",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor)` | stats latest(health_score) AS aggregate",
|
|
"search_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor)` | stats latest(health_score) AS aggregate",
|
|
"search_alert": "",
|
|
"search_alert_earliest": "15",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": null,
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor)` [| stats count | addinfo | eval search= \"earliest=\" + tostring(info_min_time-(info_max_time-info_min_time))+ \" latest=\" + tostring(info_max_time) |fields search] | addinfo | eval bucket=if(_time<info_max_time-((info_max_time-info_min_time)/2), \"last_window\", \"current_window\") | stats avg(health_score) AS aggregate BY bucket | reverse | delta aggregate AS window_delta | search bucket=current_window | eval window_direction=if(window_delta >0, \"increase\", if(window_delta < 0, \"decrease\", \"none\"))",
|
|
"search_time_series": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor)` | timechart avg(health_score) AS aggregate",
|
|
"search_time_series_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor)` | timechart avg(health_score) AS aggregate",
|
|
"search_time_series_entities": "",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_Processor",
|
|
"threshold_eval": "",
|
|
"threshold_field": "aggregate",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#AED3E5",
|
|
"base_severity_color_light": "#E3F0F6",
|
|
"base_severity_label": "info",
|
|
"base_severity_value": 1.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#AED3E5",
|
|
"base_severity_color_light": "#E3F0F6",
|
|
"base_severity_label": "info",
|
|
"base_severity_value": 1.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "ServiceHealthScore",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "service_health",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 11.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": true,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 559,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 559.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": "Critical",
|
|
"severity_value": 6.0,
|
|
"threshold_value": 509.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_rules": [
|
|
{
|
|
"change_from": [
|
|
"high",
|
|
"medium",
|
|
"low",
|
|
"normal",
|
|
"info"
|
|
],
|
|
"change_to": "critical"
|
|
}
|
|
],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Privileged Time\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "Shows the percentage of processor time spent in privileged mode. Privileged mode is a processing mode designed for operating system components and hardware-manipulating drivers. It allows direct access to hardware and all memory.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-33145f584fe1191988d8f29f",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Privileged Time\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Privileged Time\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-33145f584fe1191988d8f29f, true, true, true)` | eval kpi=\"% Privileged Time\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Privileged Time\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-33145f584fe1191988d8f29f)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Privileged Time\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-33145f584fe1191988d8f29f, true, true, true)` | eval kpi=\"% Privileged Time\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Privileged Time\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-33145f584fe1191988d8f29f)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Privileged Time\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-33145f584fe1191988d8f29f)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Privileged Time\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-33145f584fe1191988d8f29f)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Privileged Time\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-33145f584fe1191988d8f29f)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Privileged Time\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_Processor",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 1049,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1049.345,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.95,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": "Critical",
|
|
"severity_value": 6.0,
|
|
"threshold_value": 59.8
|
|
}
|
|
]
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "range",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "% Privileged Time",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "%",
|
|
"urgency": 5.0,
|
|
"use_time_policies": true
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Processor Time\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "% Processor Time is the percentage of elapsed time that the processor spends to execute a non-Idle thread. It is calculated by measuring the percentage of time that the processor spends executing the idle thread and then subtracting that value from 100%. (Each processor has an idle thread to which time is accumulated when no other threads are ready to run). This counter is the primary indicator of processor activity, and displays the average percentage of busy time observed during the sample interval. It should be noted that the accounting calculation of whether the processor is idle is performed at an internal sampling interval of the system clock tick. On todays fast processors, % Processor Time can therefore underestimate the processor utilization as the processor may be spending a lot of time servicing threads between the system clock sampling interval. Workload based timer applications are one example of applications which are more likely to be measured inaccurately as timers are signaled just after the sample is taken. Processor Utility is the amount of work a processor is completing, as a percentage of the amount of work the processor could complete if it were running at its nominal performance and never idle. On some processors, Processor Utility may exceed 100%.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-ab4be79952451d2be0daeedc",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Processor Time\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Processor Time\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-ab4be79952451d2be0daeedc, true, true, true)` | eval kpi=\"% Processor Time\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Processor Time\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-ab4be79952451d2be0daeedc)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Processor Time\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-ab4be79952451d2be0daeedc, true, true, true)` | eval kpi=\"% Processor Time\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Processor Time\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-ab4be79952451d2be0daeedc)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Processor Time\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-ab4be79952451d2be0daeedc)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Processor Time\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-ab4be79952451d2be0daeedc)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Processor Time\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-ab4be79952451d2be0daeedc)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% Processor Time\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_Processor",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "% Processor Time",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "%",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% User Time\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "Shows the percentage of processor time spent in user mode. User mode is a restricted processing mode designed for applications, environment subsystems, and integral subsystems.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-385e97424f1eded7d892ea98",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% User Time\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% User Time\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-385e97424f1eded7d892ea98, true, true, true)` | eval kpi=\"% User Time\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% User Time\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-385e97424f1eded7d892ea98)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% User Time\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-385e97424f1eded7d892ea98, true, true, true)` | eval kpi=\"% User Time\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% User Time\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-385e97424f1eded7d892ea98)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% User Time\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-385e97424f1eded7d892ea98)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% User Time\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-385e97424f1eded7d892ea98)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% User Time\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor, da-itsi-cp-microsoft-exchange-385e97424f1eded7d892ea98)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" object=Processor eventtype=msexchange-perfmon counter=\"% User Time\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_Processor",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "% User Time",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "%",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
}
|
|
],
|
|
"service_tags": {
|
|
"tags": [],
|
|
"template_tags": []
|
|
},
|
|
"service_template_id": "",
|
|
"services_depending_on_me": [
|
|
{
|
|
"kpis_depending_on": [
|
|
"SHKPI-da-itsi-cp-microsoft-exchange-msexchange-basemetrics-processor"
|
|
],
|
|
"service_id": "da-itsi-cp-microsoft-exchange-msexchange-basemetrics-group-processing"
|
|
}
|
|
],
|
|
"services_depends_on": [],
|
|
"team_id": "default_itsi_security_group",
|
|
"title": "MSExchange_BaseMetrics_Processor",
|
|
"version": "0.0.33"
|
|
} |