Looking for the correct trigger for a linux process name that runs as two processes

[pmurtey]

Hi All, We are trying to determine the correct trigger for a process monitor. The linux process we are monitoring shows there are 2 processes running using the the same name
.
proc.num[,,,/alerts]

Shown in the Latest data - sxxuroxa01p_alerts 05/21/2021 12:48:50 PM 2

If we use the following trigger statement, if both processes stop then the alert will trigger.

{sxxuroxa01proc.num[,,,/alerts].max(60)}=0

If we want an alarm when just 1 of the 2 processes stops, what would be the correct trigger configuration?

Would it be : {sxxuroxa01proc.num[,,,/alerts].max(60)}=1

Thanks In Advance

[pmurtey]

not sure why the smilie face is substituting for a letter p colon letter p above , in both of those statements

[dimir]

To avoid smileys enclose the text between [\CODE]and[/CODE] (without backslash befor first "C").

I'd advise to trigger if "less that 2 processes running" in your case using:

{sxxuroxa01p:proc.num[,,,/alerts].max(60)}<2

[pmurtey]

Thank You both very much.

[cyber]

<2 will cover both cases, one is dead or both are dead. If they really need both cases separately (needed actions are different or severity of the case), then they need 2 triggers. one for =0 and other with =1.