cancel
Showing results for 
Search instead for 
Did you mean: 

Threshold based on COUNT of UnixProcess with same name

05 Base Camper

Threshold based on COUNT of UnixProcess with same name

I currently have a threshold condition with where clause: EXECNAME IN { "is.exe"}

This alerts if there are NO processes with the name is.exe on the Unix servers being monitored.

I want to change the condition to alert if there are less than 10 processes with the name is.exe on the monitored servers. How can I achieve this? 

Tags (2)
4 REPLIES 4
Highlighted
Staff

Re: Threshold based on COUNT of UnixProcess with same name

Hello Mary,

 

Thank you for the question. Thresholds can only look at one record at a time. To look at 10 or more rows at a time will require an Analyst rule or custom solution. The consulting team will need to be contacted via your Account Manager to have this Analyst or custom solution created. 

 

Thanks, 
Dale Jones

05 Base Camper

Re: Threshold based on COUNT of UnixProcess with same name

Did you try using the UnixProcessWorkload record and the where clause of

ExecutableName and ProcessCount.

 

i.e.

EXECNAME = "is.exe" AND PROCCNT < 10

 

05 Base Camper

Re: Threshold based on COUNT of UnixProcess with same name

I wasn't aware of the UnixProcessWorkload record, so I will give that a try this morning. Thank you!

05 Base Camper

Re: Threshold based on COUNT of UnixProcess with same name

Do you know if there are configurations required for a UnixProcessWorkload?

 

Webinar: The Journey to Microsoft Teams - Readiness Phase (part 2)

Having looked at the planning phase in session one of this series, we will turn our focus to the readiness phase. The all important technical capabilities assessment, ensuring the network, endpoints and users are adequately prepared for the move.

Hear first hand from IR's Global Head of Information Systems and Technology, Jason Schwendinger, on how he has been tackling these issues.

Join webinar