You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
101 lines
4.1 KiB
101 lines
4.1 KiB
{
|
|
"alert_lag": 30,
|
|
"alert_period": "5",
|
|
"base_search": "| mstats avg(\"cpu.utilization\") as sa_cpu_utilization, sum(\"memory.free\") as sa_memory_free, avg(\"disk_ops.read\") as sa_disk_read, avg(\"disk_ops.write\") as sa_disk_write, avg(\"if_octets.rx\") as sa_network_receive, avg(\"if_octets.tx\") as sa_network_send, avg(\"if_errors.tx\") as sa_network_error_tx, avg(\"if_errors.rx\") as sa_network_error_rx where `itsi-cp-observability-indexes` AND cluster!=* by host.name span=15m | eval sa_memory_free_mb=sa_memory_free/1024/1024 | rename host.name as host_name | dedup host_name | table _time, host_name, sa_cpu_utilization, sa_memory_free_mb, sa_disk_read, sa_disk_write, sa_network_receive, sa_network_send, sa_network_error_tx, sa_network_error_rx",
|
|
"description": "",
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host_name",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-splunk-observability-sim-data-center-hosts",
|
|
"metric_qualifier": "",
|
|
"metrics": [
|
|
{
|
|
"aggregate_statop": "avg",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "cpu-utilization",
|
|
"threshold_field": "sa_cpu_utilization",
|
|
"title": "CPU Utilization",
|
|
"unit": "%"
|
|
},
|
|
{
|
|
"aggregate_statop": "avg",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "disk-read-iops",
|
|
"threshold_field": "sa_disk_read",
|
|
"title": "Disk Read IOps",
|
|
"unit": ""
|
|
},
|
|
{
|
|
"aggregate_statop": "avg",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "disk-write-iops",
|
|
"threshold_field": "sa_disk_write",
|
|
"title": "Disk Write IOps",
|
|
"unit": ""
|
|
},
|
|
{
|
|
"aggregate_statop": "avg",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "memory-free",
|
|
"threshold_field": "sa_memory_free_mb",
|
|
"title": "Memory Free",
|
|
"unit": "mb"
|
|
},
|
|
{
|
|
"aggregate_statop": "avg",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "network-rx",
|
|
"threshold_field": "sa_network_receive",
|
|
"title": "Network Rx",
|
|
"unit": ""
|
|
},
|
|
{
|
|
"aggregate_statop": "avg",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "network-tx",
|
|
"threshold_field": "sa_network_send",
|
|
"title": "Network Tx",
|
|
"unit": ""
|
|
}
|
|
],
|
|
"search_alert_earliest": "15",
|
|
"title": "SIM_data_center_hosts",
|
|
"version": "0.0.38"
|
|
} |