How to identify systems based on certain cpu utilization criteria

[NewbieUser]

Hello everyone,

I'm new to Zabbix but I have a certain requirement which I'm not sure if it will be possible or not. I need to identify systems (Windows OS in my case) based on the following criteria.

• The reported average CPU utilization less than 20% over 30 days period
• The core count is more than 1
• The reported max CPU utilization is less than 90% for 1hour (in a day?) over a 30 days period.

So basically I'm trying to filter out any idle systems, that are used for processing few days a month and use their CPU fully for more than 1 hour at a time/day. If 1 hour in a day is not possible, but its cumulative over the 30d period, it would still work for me.
I've got the following trigger expressions constructed, but I'm not sure if this would work. Zabbix doesn't complain about the syntax.

{Template Module Windows CPU by Zabbix agent:system.cpu.util.avg(30d)}<=20 and {Template Module Windows CPU by Zabbix agent:wmi.get[root/cimv2,"Select NumberOfLogicalProcessors from Win32_ComputerSystem"].last(#1)}>1 and {Template Module Windows CPU by Zabbix agent:system.cpu.util.max(1h,30d)}<=90

[cyber]

max(1h,30d) means max value for 1h period 30 days ago... second parameter is "time shift", it moves measuring point back in time. So this one does not really work here...
Last condition should be "cpu utilization is over 90% no more than 1h a day"? I am not sure, you can get it computed on the fly...

[NewbieUser]

Completely went over my head the time shift. I understand this won't work.

I don't need this to be computed on the fly but I need to look at historical data. If 30day average CPU utilization is under 20 percent and same 30 day CPU Utilization hasn't surpassed 90% for more than 1 hour, I'll get notified with a list of systems that meet these criteria. The 1 hour limit is set as an example and this could be as a cumulative during the 30 day period.

Hope the explanation is clear, because I believe it might be a bit tricky what I'm trying to achieve.