Hi, at the moment we have the following trigger which alerts when the status of a monitered service changes to 'Critical' from 'Normal'
{Template Windows HyperV Host:hyperv.check[GetVMReplication,{#VMNAME}].regexp(Critical)}=1
The problem comes with this is that the status can change from 'Normal' to 'Critical' and then back to 'Normal' - since the process is to a degree self healing. The interval check is set to 1 minute. So we get an alert each time the status changes to 'Critical' I'd like to amend the alert so that it only triggers if the last X have been 'Critical'. I have tried
{Template Windows HyperV Host:hyperv.check[GetVMReplication,{#VMNAME}].count(#6,Critical,"Like")}>5 to trigger only if the last 5 have been critical but this does not seem to trigger at all. I've tried various combinations of syntax but none seem to work. Where am i goin wrong ?.
Ideally im looking for a logic along the lines of
If vmreplication 'Normal' do nothing
If vmreplication 'Critical' check previous (say) 5 alerts and if ALL critical then alert and supress any following alerts until there have been 2 (say) 'Normal' responses.
Can anybody point me in the right direction here please ?
{Template Windows HyperV Host:hyperv.check[GetVMReplication,{#VMNAME}].regexp(Critical)}=1
The problem comes with this is that the status can change from 'Normal' to 'Critical' and then back to 'Normal' - since the process is to a degree self healing. The interval check is set to 1 minute. So we get an alert each time the status changes to 'Critical' I'd like to amend the alert so that it only triggers if the last X have been 'Critical'. I have tried
{Template Windows HyperV Host:hyperv.check[GetVMReplication,{#VMNAME}].count(#6,Critical,"Like")}>5 to trigger only if the last 5 have been critical but this does not seem to trigger at all. I've tried various combinations of syntax but none seem to work. Where am i goin wrong ?.
Ideally im looking for a logic along the lines of
If vmreplication 'Normal' do nothing
If vmreplication 'Critical' check previous (say) 5 alerts and if ALL critical then alert and supress any following alerts until there have been 2 (say) 'Normal' responses.
Can anybody point me in the right direction here please ?