You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
2541 lines
157 KiB
2541 lines
157 KiB
{
|
|
"algorithms": {
|
|
"GradientBoostingRegressor": {
|
|
"RMSE": 0,
|
|
"modelId": "",
|
|
"rSquared": 0,
|
|
"recommended": false
|
|
},
|
|
"LinearRegression": {
|
|
"RMSE": 0,
|
|
"modelId": "",
|
|
"rSquared": 0,
|
|
"recommended": false
|
|
},
|
|
"LogisticRegression": {
|
|
"accuracy": 0,
|
|
"f1_score": 0,
|
|
"modelId": "",
|
|
"precision": 0,
|
|
"recall": 0,
|
|
"recommended": false
|
|
},
|
|
"RandomForestRegressor": {
|
|
"RMSE": 0,
|
|
"modelId": "",
|
|
"rSquared": 0,
|
|
"recommended": false
|
|
}
|
|
},
|
|
"description": "",
|
|
"enabled": true,
|
|
"entity_rules": [],
|
|
"key": "da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability",
|
|
"kpis": [
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": null,
|
|
"severity_value": 6.0,
|
|
"threshold_value": 0.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#F26A35",
|
|
"severity_color_light": "#FBCBB9",
|
|
"severity_label": "high",
|
|
"severity_label_localized": null,
|
|
"severity_value": 5.0,
|
|
"threshold_value": 20.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FCB64E",
|
|
"severity_color_light": "#FEE6C1",
|
|
"severity_label": "medium",
|
|
"severity_label_localized": null,
|
|
"severity_value": 4.0,
|
|
"threshold_value": 40.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FFE98C",
|
|
"severity_color_light": "#FFF4C5",
|
|
"severity_label": "low",
|
|
"severity_label_localized": null,
|
|
"severity_value": 3.0,
|
|
"threshold_value": 60.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": null,
|
|
"severity_value": 2.0,
|
|
"threshold_value": 80.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "1",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": 0.999,
|
|
"anomaly_detection_training_window": "-7d",
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability)`",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "",
|
|
"enabled": false,
|
|
"entity_filter_field": "",
|
|
"entity_split_field": "",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": null,
|
|
"severity_value": 6.0,
|
|
"threshold_value": 0.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#F26A35",
|
|
"severity_color_light": "#FBCBB9",
|
|
"severity_label": "high",
|
|
"severity_label_localized": null,
|
|
"severity_value": 5.0,
|
|
"threshold_value": 20.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FCB64E",
|
|
"severity_color_light": "#FEE6C1",
|
|
"severity_label": "medium",
|
|
"severity_label_localized": null,
|
|
"severity_value": 4.0,
|
|
"threshold_value": 40.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FFE98C",
|
|
"severity_color_light": "#FFF4C5",
|
|
"severity_label": "low",
|
|
"severity_label_localized": null,
|
|
"severity_value": 3.0,
|
|
"threshold_value": 60.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": null,
|
|
"severity_value": 2.0,
|
|
"threshold_value": 80.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": false,
|
|
"key": "SHKPI-da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability",
|
|
"kpi_base_search": "",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability)` | stats latest(health_score) AS aggregate",
|
|
"search_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability)` | stats latest(health_score) AS aggregate",
|
|
"search_alert": "",
|
|
"search_alert_earliest": "15",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": null,
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability)` [| stats count | addinfo | eval search= \"earliest=\" + tostring(info_min_time-(info_max_time-info_min_time))+ \" latest=\" + tostring(info_max_time) |fields search] | addinfo | eval bucket=if(_time<info_max_time-((info_max_time-info_min_time)/2), \"last_window\", \"current_window\") | stats avg(health_score) AS aggregate BY bucket | reverse | delta aggregate AS window_delta | search bucket=current_window | eval window_direction=if(window_delta >0, \"increase\", if(window_delta < 0, \"decrease\", \"none\"))",
|
|
"search_time_series": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability)` | timechart avg(health_score) AS aggregate",
|
|
"search_time_series_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability)` | timechart avg(health_score) AS aggregate",
|
|
"search_time_series_entities": "",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_Mailbox_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "aggregate",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#AED3E5",
|
|
"base_severity_color_light": "#E3F0F6",
|
|
"base_severity_label": "info",
|
|
"base_severity_value": 1.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#AED3E5",
|
|
"base_severity_color_light": "#E3F0F6",
|
|
"base_severity_label": "info",
|
|
"base_severity_value": 1.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "ServiceHealthScore",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "service_health",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 11.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Mailboxes",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeADTopology"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\"",
|
|
"description": "Provides Active Directory topology information to Exchange services. If this service is stopped, most Exchange services are unable to start.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-82634b57e8e0dc1420dd2327",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-82634b57e8e0dc1420dd2327, true, true, true)` | eval kpi=\"AD Topology Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-82634b57e8e0dc1420dd2327)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-82634b57e8e0dc1420dd2327, true, true, true)` | eval kpi=\"AD Topology Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-82634b57e8e0dc1420dd2327)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-82634b57e8e0dc1420dd2327)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-82634b57e8e0dc1420dd2327)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-82634b57e8e0dc1420dd2327)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Mailbox_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "AD Topology Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-wsbexchange\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Mailboxes",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-wsbexchange"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-wsbexchange\"",
|
|
"description": "Enables Windows Server Backup users to back up and recover application data for Microsoft Exchange Server.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-a2daffff11db186e302f18fa",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-wsbexchange\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-wsbexchange\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-a2daffff11db186e302f18fa, true, true, true)` | eval kpi=\"Backup Extension\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-wsbexchange\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-a2daffff11db186e302f18fa)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-wsbexchange\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-a2daffff11db186e302f18fa, true, true, true)` | eval kpi=\"Backup Extension\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-wsbexchange\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-a2daffff11db186e302f18fa)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-wsbexchange\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-a2daffff11db186e302f18fa)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-wsbexchange\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-a2daffff11db186e302f18fa)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-wsbexchange\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-a2daffff11db186e302f18fa)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-wsbexchange\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Mailbox_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Backup Extension",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Mailboxes",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeServiceHost"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\"",
|
|
"description": "Provides a host for several Microsoft Exchange services",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-710d686217d08a3c914893e1",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-710d686217d08a3c914893e1, true, true, true)` | eval kpi=\"Exchange Service Host\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-710d686217d08a3c914893e1)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-710d686217d08a3c914893e1, true, true, true)` | eval kpi=\"Exchange Service Host\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-710d686217d08a3c914893e1)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-710d686217d08a3c914893e1)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-710d686217d08a3c914893e1)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-710d686217d08a3c914893e1)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Mailbox_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Exchange Service Host",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Mailboxes",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeSubmission"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\"",
|
|
"description": "This service, running on the Mailbox servers, receives the Submit events, processes the messages by converting them from MAPI to MIME, and then hands them over to the Transport service on a Mailbox server.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-b73d76d419d931b79ffb8030",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-b73d76d419d931b79ffb8030, true, true, true)` | eval kpi=\"Exchange Submission Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-b73d76d419d931b79ffb8030)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-b73d76d419d931b79ffb8030, true, true, true)` | eval kpi=\"Exchange Submission Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-b73d76d419d931b79ffb8030)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-b73d76d419d931b79ffb8030)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-b73d76d419d931b79ffb8030)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-b73d76d419d931b79ffb8030)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Mailbox_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Exchange Submission Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Mailboxes",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeFastSearch"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\"",
|
|
"description": "Drives indexing and querying of data for Exchange.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-af1185d8e1db621639022050",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-af1185d8e1db621639022050, true, true, true)` | eval kpi=\"Fast Search Indexer\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-af1185d8e1db621639022050)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-af1185d8e1db621639022050, true, true, true)` | eval kpi=\"Fast Search Indexer\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-af1185d8e1db621639022050)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-af1185d8e1db621639022050)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-af1185d8e1db621639022050)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-af1185d8e1db621639022050)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Mailbox_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Fast Search Indexer",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Mailboxes",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-W3SVC"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\"",
|
|
"description": "Provides Web connectivity and administration through the Internet Information Services Manager",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-c917e4dcd033b36fbad49459",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c917e4dcd033b36fbad49459, true, true, true)` | eval kpi=\"IIS Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c917e4dcd033b36fbad49459)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c917e4dcd033b36fbad49459, true, true, true)` | eval kpi=\"IIS Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c917e4dcd033b36fbad49459)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c917e4dcd033b36fbad49459)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c917e4dcd033b36fbad49459)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c917e4dcd033b36fbad49459)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Mailbox_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "IIS Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeIS\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Mailboxes",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeIS"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeIS\"",
|
|
"description": "Manages the Microsoft Exchange Information Store. This includes mailbox databases and public folder databases. If this service is stopped, mailbox databases and public folder databases on this computer are unavailable. If this service is disabled, any services that explicitly depends on it will fail to start.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-d99d0f68b18552091d6e8c55",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeIS\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeIS\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-d99d0f68b18552091d6e8c55, true, true, true)` | eval kpi=\"Information Store\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeIS\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-d99d0f68b18552091d6e8c55)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeIS\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-d99d0f68b18552091d6e8c55, true, true, true)` | eval kpi=\"Information Store\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeIS\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-d99d0f68b18552091d6e8c55)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeIS\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-d99d0f68b18552091d6e8c55)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeIS\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-d99d0f68b18552091d6e8c55)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeIS\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-d99d0f68b18552091d6e8c55)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeIS\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Mailbox_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Information Store",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxAssistants\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Mailboxes",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeMailboxAssistants"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxAssistants\"",
|
|
"description": "Performs background processing of mailboxes in the Exchange store.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-17a6a02a8637450491a80605",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxAssistants\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxAssistants\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-17a6a02a8637450491a80605, true, true, true)` | eval kpi=\"Mailbox Assistants\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxAssistants\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-17a6a02a8637450491a80605)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxAssistants\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-17a6a02a8637450491a80605, true, true, true)` | eval kpi=\"Mailbox Assistants\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxAssistants\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-17a6a02a8637450491a80605)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxAssistants\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-17a6a02a8637450491a80605)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxAssistants\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-17a6a02a8637450491a80605)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxAssistants\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-17a6a02a8637450491a80605)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxAssistants\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Mailbox_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Mailbox Assistants",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeRepl\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Mailboxes",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeRepl"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeRepl\"",
|
|
"description": "The Microsoft Exchange Replication service provides replication functionality for mailbox databases on Mailbox servers in a database availability group.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-c140db688efcd97b1bd8b372",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeRepl\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeRepl\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c140db688efcd97b1bd8b372, true, true, true)` | eval kpi=\"Replication Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeRepl\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c140db688efcd97b1bd8b372)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeRepl\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c140db688efcd97b1bd8b372, true, true, true)` | eval kpi=\"Replication Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeRepl\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c140db688efcd97b1bd8b372)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeRepl\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c140db688efcd97b1bd8b372)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeRepl\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c140db688efcd97b1bd8b372)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeRepl\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c140db688efcd97b1bd8b372)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeRepl\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Mailbox_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Replication Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSearch\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Mailboxes",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeSearch"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSearch\"",
|
|
"description": "Drives indexing of mailbox content, which improves the performance of content search.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-c8e9d1a64b2e0e77bf410166",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSearch\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSearch\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c8e9d1a64b2e0e77bf410166, true, true, true)` | eval kpi=\"Search Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSearch\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c8e9d1a64b2e0e77bf410166)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSearch\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c8e9d1a64b2e0e77bf410166, true, true, true)` | eval kpi=\"Search Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSearch\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c8e9d1a64b2e0e77bf410166)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSearch\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c8e9d1a64b2e0e77bf410166)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSearch\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c8e9d1a64b2e0e77bf410166)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSearch\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-c8e9d1a64b2e0e77bf410166)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSearch\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Mailbox_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Search Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeThrottling\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Mailboxes",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeThrottling"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeThrottling\"",
|
|
"description": "Limits the rate of user operations",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-274232c30849545339323fa3",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeThrottling\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeThrottling\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-274232c30849545339323fa3, true, true, true)` | eval kpi=\"Throttling Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeThrottling\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-274232c30849545339323fa3)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeThrottling\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-274232c30849545339323fa3, true, true, true)` | eval kpi=\"Throttling Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeThrottling\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-274232c30849545339323fa3)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeThrottling\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-274232c30849545339323fa3)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeThrottling\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-274232c30849545339323fa3)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeThrottling\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-274232c30849545339323fa3)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeThrottling\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Mailbox_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Throttling Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Mailboxes",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeTransportLogSearch"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\"",
|
|
"description": "Microsoft Exchange Transport Log Search service.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-ea1cc3563cae90e9d3e861d2",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-ea1cc3563cae90e9d3e861d2, true, true, true)` | eval kpi=\"Transport Log Search Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-ea1cc3563cae90e9d3e861d2)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-ea1cc3563cae90e9d3e861d2, true, true, true)` | eval kpi=\"Transport Log Search Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-ea1cc3563cae90e9d3e861d2)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-ea1cc3563cae90e9d3e861d2)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-ea1cc3563cae90e9d3e861d2)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-ea1cc3563cae90e9d3e861d2)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Mailbox_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Transport Log Search Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Mailboxes",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeTransport"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\"",
|
|
"description": "Microsoft Exchange Transport service.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-4ddc58522b618729a87bfa73",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-4ddc58522b618729a87bfa73, true, true, true)` | eval kpi=\"Transport Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-4ddc58522b618729a87bfa73)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-4ddc58522b618729a87bfa73, true, true, true)` | eval kpi=\"Transport Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-4ddc58522b618729a87bfa73)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-4ddc58522b618729a87bfa73)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-4ddc58522b618729a87bfa73)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability, da-itsi-cp-microsoft-exchange-4ddc58522b618729a87bfa73)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Mailboxes search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Mailbox_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Transport Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
}
|
|
],
|
|
"service_tags": {
|
|
"tags": [],
|
|
"template_tags": []
|
|
},
|
|
"service_template_id": "",
|
|
"services_depending_on_me": [
|
|
{
|
|
"kpis_depending_on": [
|
|
"SHKPI-da-itsi-cp-microsoft-exchange-msexchange-mailbox-availability"
|
|
],
|
|
"service_id": "da-itsi-cp-microsoft-exchange-msexchange-mailbox"
|
|
}
|
|
],
|
|
"services_depends_on": [],
|
|
"team_id": "default_itsi_security_group",
|
|
"title": "MSExchange_Mailbox_Availability",
|
|
"version": "0.0.33"
|
|
} |