You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1468 lines
89 KiB
1468 lines
89 KiB
{
|
|
"algorithms": {
|
|
"GradientBoostingRegressor": {
|
|
"RMSE": 0,
|
|
"modelId": "",
|
|
"rSquared": 0,
|
|
"recommended": false
|
|
},
|
|
"LinearRegression": {
|
|
"RMSE": 0,
|
|
"modelId": "",
|
|
"rSquared": 0,
|
|
"recommended": false
|
|
},
|
|
"LogisticRegression": {
|
|
"accuracy": 0,
|
|
"f1_score": 0,
|
|
"modelId": "",
|
|
"precision": 0,
|
|
"recall": 0,
|
|
"recommended": false
|
|
},
|
|
"RandomForestRegressor": {
|
|
"RMSE": 0,
|
|
"modelId": "",
|
|
"rSquared": 0,
|
|
"recommended": false
|
|
}
|
|
},
|
|
"description": "The System service deliver KPI's focused on the Windows Server resources and utilization of these resources and throughput. Be aware that the instances of \\Process(*)\\% Processor Time show all of the processor usage across all of the threads of the process. This means that any single process can consume up to 100% times the number of processors so long as it has enough threads to keep more than one processor busy. For example, an IIS worker process (w3wp.exe) is multithreaded and can consume up to 800% processor time on a system with eight logical processors. Alternatively, a single-threaded process can only consume up to 100% of a single logical processor. The single thread might run on a single processor or it might be evenly distributed across processors depending on the operating system.",
|
|
"enabled": true,
|
|
"entity_rules": [],
|
|
"key": "da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system",
|
|
"kpis": [
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": null,
|
|
"severity_value": 6.0,
|
|
"threshold_value": 0.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#F26A35",
|
|
"severity_color_light": "#FBCBB9",
|
|
"severity_label": "high",
|
|
"severity_label_localized": null,
|
|
"severity_value": 5.0,
|
|
"threshold_value": 20.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FCB64E",
|
|
"severity_color_light": "#FEE6C1",
|
|
"severity_label": "medium",
|
|
"severity_label_localized": null,
|
|
"severity_value": 4.0,
|
|
"threshold_value": 40.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FFE98C",
|
|
"severity_color_light": "#FFF4C5",
|
|
"severity_label": "low",
|
|
"severity_label_localized": null,
|
|
"severity_value": 3.0,
|
|
"threshold_value": 60.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": null,
|
|
"severity_value": 2.0,
|
|
"threshold_value": 80.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "1",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": 0.999,
|
|
"anomaly_detection_training_window": "-7d",
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system)`",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "",
|
|
"enabled": false,
|
|
"entity_filter_field": "",
|
|
"entity_split_field": "",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": null,
|
|
"severity_value": 6.0,
|
|
"threshold_value": 0.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#F26A35",
|
|
"severity_color_light": "#FBCBB9",
|
|
"severity_label": "high",
|
|
"severity_label_localized": null,
|
|
"severity_value": 5.0,
|
|
"threshold_value": 20.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FCB64E",
|
|
"severity_color_light": "#FEE6C1",
|
|
"severity_label": "medium",
|
|
"severity_label_localized": null,
|
|
"severity_value": 4.0,
|
|
"threshold_value": 40.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FFE98C",
|
|
"severity_color_light": "#FFF4C5",
|
|
"severity_label": "low",
|
|
"severity_label_localized": null,
|
|
"severity_value": 3.0,
|
|
"threshold_value": 60.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": null,
|
|
"severity_value": 2.0,
|
|
"threshold_value": 80.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": false,
|
|
"key": "SHKPI-da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system",
|
|
"kpi_base_search": "",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system)` | stats latest(health_score) AS aggregate",
|
|
"search_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system)` | stats latest(health_score) AS aggregate",
|
|
"search_alert": "",
|
|
"search_alert_earliest": "15",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": null,
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system)` [| stats count | addinfo | eval search= \"earliest=\" + tostring(info_min_time-(info_max_time-info_min_time))+ \" latest=\" + tostring(info_max_time) |fields search] | addinfo | eval bucket=if(_time<info_max_time-((info_max_time-info_min_time)/2), \"last_window\", \"current_window\") | stats avg(health_score) AS aggregate BY bucket | reverse | delta aggregate AS window_delta | search bucket=current_window | eval window_direction=if(window_delta >0, \"increase\", if(window_delta < 0, \"decrease\", \"none\"))",
|
|
"search_time_series": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system)` | timechart avg(health_score) AS aggregate",
|
|
"search_time_series_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system)` | timechart avg(health_score) AS aggregate",
|
|
"search_time_series_entities": "",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_System",
|
|
"threshold_eval": "",
|
|
"threshold_field": "aggregate",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#AED3E5",
|
|
"base_severity_color_light": "#E3F0F6",
|
|
"base_severity_label": "info",
|
|
"base_severity_value": 1.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#AED3E5",
|
|
"base_severity_color_light": "#E3F0F6",
|
|
"base_severity_label": "info",
|
|
"base_severity_value": 1.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "ServiceHealthScore",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "service_health",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 11.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 114465725.96070097,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Bytes/sec\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "Shows the overall rate at which bytes are read to satisfy file system read requests to all devices on the computer, including read operations from the file system cache. It is measured in numbers of bytes per second.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 115246100.69865595,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-d0456edae49ea6fc1ce396c5",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Bytes/sec\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Bytes/sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-d0456edae49ea6fc1ce396c5, true, true, true)` | eval kpi=\"File Read Bytes/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Bytes/sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-d0456edae49ea6fc1ce396c5)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Bytes/sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-d0456edae49ea6fc1ce396c5, true, true, true)` | eval kpi=\"File Read Bytes/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Bytes/sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-d0456edae49ea6fc1ce396c5)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Bytes/sec\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-d0456edae49ea6fc1ce396c5)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Bytes/sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-d0456edae49ea6fc1ce396c5)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Bytes/sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-d0456edae49ea6fc1ce396c5)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Bytes/sec\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_System",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "File Read Bytes/sec",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "/sec",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 250235.63722038877,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Operations/sec\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "Shows the combined rate of file system read requests to all devices on the computer, including requests to read from the file system cache. It is measured in numbers of read operations per second.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 275160.7822168881,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-b8d355ed67f98e2d27fa73ed",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Operations/sec\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Operations/sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-b8d355ed67f98e2d27fa73ed, true, true, true)` | eval kpi=\"File Read Operations/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Operations/sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-b8d355ed67f98e2d27fa73ed)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Operations/sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-b8d355ed67f98e2d27fa73ed, true, true, true)` | eval kpi=\"File Read Operations/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Operations/sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-b8d355ed67f98e2d27fa73ed)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Operations/sec\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-b8d355ed67f98e2d27fa73ed)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Operations/sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-b8d355ed67f98e2d27fa73ed)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Operations/sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-b8d355ed67f98e2d27fa73ed)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Read Operations/sec\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_System",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "File Read Operations/sec",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "/sec",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 66199945.25734683,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Bytes/sec\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "Shows the combined rate of file system read requests to all devices on the computer, including requests to write from the file system cache. It is measured in numbers of read operations per second.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 66283956.89462176,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-0bf26f482b3cecf51f17c4ed",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Bytes/sec\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Bytes/sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-0bf26f482b3cecf51f17c4ed, true, true, true)` | eval kpi=\"File Write Bytes/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Bytes/sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-0bf26f482b3cecf51f17c4ed)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Bytes/sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-0bf26f482b3cecf51f17c4ed, true, true, true)` | eval kpi=\"File Write Bytes/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Bytes/sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-0bf26f482b3cecf51f17c4ed)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Bytes/sec\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-0bf26f482b3cecf51f17c4ed)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Bytes/sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-0bf26f482b3cecf51f17c4ed)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Bytes/sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-0bf26f482b3cecf51f17c4ed)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Bytes/sec\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_System",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "File Write Bytes/sec",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "/sec",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 8088.330136163562,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Operations/sec\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "Shows the combined rate of file system write requests to all devices on the computer, including requests to write to data in the file system cache. It is measured in numbers of write operations per second.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 8224.09254107609,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-2054d20fe9193a7eb5e981b8",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Operations/sec\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Operations/sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-2054d20fe9193a7eb5e981b8, true, true, true)` | eval kpi=\"File Write Operations/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Operations/sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-2054d20fe9193a7eb5e981b8)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Operations/sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-2054d20fe9193a7eb5e981b8, true, true, true)` | eval kpi=\"File Write Operations/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Operations/sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-2054d20fe9193a7eb5e981b8)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Operations/sec\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-2054d20fe9193a7eb5e981b8)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Operations/sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-2054d20fe9193a7eb5e981b8)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Operations/sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-2054d20fe9193a7eb5e981b8)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"File Write Operations/sec\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_System",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "File Write Operations/sec",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "/sec",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 130.2,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Processes\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "Total number of processes running.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-a248dd402caecf0fa687d0cd",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Processes\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Processes\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-a248dd402caecf0fa687d0cd, true, true, true)` | eval kpi=\"Processes\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Processes\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-a248dd402caecf0fa687d0cd)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Processes\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-a248dd402caecf0fa687d0cd, true, true, true)` | eval kpi=\"Processes\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Processes\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-a248dd402caecf0fa687d0cd)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Processes\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-a248dd402caecf0fa687d0cd)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Processes\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-a248dd402caecf0fa687d0cd)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Processes\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-a248dd402caecf0fa687d0cd)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Processes\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_System",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Processes",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 223746.17213463536,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Calls/sec\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "Shows the combined rate of calls to Windows system service routines by all processes running on the computer. These routines perform all of the basic scheduling and synchronization of activities on the computer, and provide access to nongraphic devices, memory management, and name space management.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 2411501.9148332393,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-4ed27a7a07d3feb444e9892c",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Calls/sec\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Calls/sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-4ed27a7a07d3feb444e9892c, true, true, true)` | eval kpi=\"System Calls/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Calls/sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-4ed27a7a07d3feb444e9892c)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Calls/sec\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-4ed27a7a07d3feb444e9892c, true, true, true)` | eval kpi=\"System Calls/sec\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Calls/sec\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-4ed27a7a07d3feb444e9892c)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Calls/sec\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-4ed27a7a07d3feb444e9892c)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Calls/sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-4ed27a7a07d3feb444e9892c)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Calls/sec\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-4ed27a7a07d3feb444e9892c)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Calls/sec\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_System",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "System Calls/sec",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "/sec",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 5622802.1025398495,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Up Time\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "Total time since last startup.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 5743421.02569469,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-1b3da11ed3e706c59118dad8",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Up Time\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Up Time\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-1b3da11ed3e706c59118dad8, true, true, true)` | eval kpi=\"System Up Time\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Up Time\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-1b3da11ed3e706c59118dad8)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Up Time\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-1b3da11ed3e706c59118dad8, true, true, true)` | eval kpi=\"System Up Time\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Up Time\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-1b3da11ed3e706c59118dad8)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Up Time\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-1b3da11ed3e706c59118dad8)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Up Time\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-1b3da11ed3e706c59118dad8)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Up Time\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-1b3da11ed3e706c59118dad8)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"System Up Time\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_System",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "System Up Time",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": null,
|
|
"aggregate_statop": "max",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 4831.9,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": null,
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": true,
|
|
"anomaly_detection_is_enabled": true,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Threads\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "Total number of threads running.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "max",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 4911.2,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-2083b6ab17f87fef9fe20229",
|
|
"kpi_base_search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Threads\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Threads\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-2083b6ab17f87fef9fe20229, true, true, true)` | eval kpi=\"Threads\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Threads\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-2083b6ab17f87fef9fe20229)`",
|
|
"search_alert": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Threads\" | `aggregate_raw_into_entity(max, Value, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `aggregate_entity_into_service(max)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-2083b6ab17f87fef9fe20229, true, true, true)` | eval kpi=\"Threads\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Threads\" | `aggregate_raw_into_single_value(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-2083b6ab17f87fef9fe20229)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Threads\" | `aggregate_raw_and_compare(max, max, Value, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-2083b6ab17f87fef9fe20229)`",
|
|
"search_time_series": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Threads\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-2083b6ab17f87fef9fe20229)`",
|
|
"search_time_series_aggregate": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Threads\" | `aggregate_raw_into_entity_time_series(max, Value, \"host\", 5)` | `aggregate_entity_into_service_time_series(max, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system, da-itsi-cp-microsoft-exchange-2083b6ab17f87fef9fe20229)`",
|
|
"search_time_series_entities": "eventtype=msperfmon-index ms_exchange_host=\"true\" eventtype=msexchange-perfmon counter=\"Threads\" | `aggregate_raw_into_limited_entity_time_series(max, Value, \"host\", 5)`",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_BaseMetrics_System",
|
|
"threshold_eval": null,
|
|
"threshold_field": "Value",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Threads",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
}
|
|
],
|
|
"service_tags": {
|
|
"tags": [],
|
|
"template_tags": []
|
|
},
|
|
"service_template_id": "",
|
|
"services_depending_on_me": [
|
|
{
|
|
"kpis_depending_on": [
|
|
"SHKPI-da-itsi-cp-microsoft-exchange-msexchange-basemetrics-system"
|
|
],
|
|
"service_id": "da-itsi-cp-microsoft-exchange-msexchange-basemetrics"
|
|
}
|
|
],
|
|
"services_depends_on": [],
|
|
"team_id": "default_itsi_security_group",
|
|
"title": "MSExchange_BaseMetrics_System",
|
|
"version": "0.0.33"
|
|
} |