-
Notifications
You must be signed in to change notification settings - Fork 1.4k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
upgrade monitors to v2 schema (#15577)
* update * move folder * update file path * Update apache_low_idle_workers.json * fix unicode <> * update
- Loading branch information
Showing
179 changed files
with
4,723 additions
and
3,752 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,29 +1,36 @@ | ||
{ | ||
"name": "[Active Directory] Elevated LDAP binding duration for host {{host.name}}", | ||
"type": "query alert", | ||
"query": "avg(last_5m):avg:active_directory.ldap.bind_time{*} by {host} > 30", | ||
"version": 2, | ||
"created_at": "2021-04-20", | ||
"last_updated_at": "2021-04-20", | ||
"title": "Elevated LDAP binding duration for host {{host.name}}", | ||
"tags": [ | ||
"integration:active-directory" | ||
], | ||
"description": "Notifies when Active Directory LDAP binding duration goes above 15ms for a specific host.", | ||
"definition": { | ||
"message": "{{#is_alert}}\n\nAlert: the LDAP binding duration for host {{host.name}} went above {{threshold}}, current value is: {{value}} ms \n\n{{/is_alert}} \n{{#is_warning}}\n\nWarning: the LDAP binding duration for host {{host.name}} went above {{threshold}}, current value is: {{value}} ms\n\n{{/is_warning}} \n\nLDAP bind times that start to exceed 15 or 30 ms may be an indication network issues are present.", | ||
"tags": [ | ||
"integration:active_directory" | ||
], | ||
"name": "[Active Directory] Elevated LDAP binding duration for host {{host.name}}", | ||
"options": { | ||
"notify_audit": false, | ||
"locked": false, | ||
"timeout_h": 0, | ||
"new_host_delay": 300, | ||
"require_full_window": false, | ||
"notify_no_data": false, | ||
"renotify_interval": 0, | ||
"escalation_message": "", | ||
"no_data_timeframe": null, | ||
"include_tags": true, | ||
"thresholds": { | ||
"critical": 30, | ||
"warning": 15 | ||
} | ||
"escalation_message": "", | ||
"include_tags": true, | ||
"locked": false, | ||
"new_host_delay": 300, | ||
"no_data_timeframe": null, | ||
"notify_audit": false, | ||
"notify_no_data": false, | ||
"renotify_interval": 0, | ||
"require_full_window": false, | ||
"thresholds": { | ||
"critical": 30, | ||
"warning": 15 | ||
}, | ||
"timeout_h": 0 | ||
}, | ||
"priority": null, | ||
"recommended_monitor_metadata": { | ||
"description": "Notifies when Active Directory LDAP binding duration goes above 15ms for a specific host." | ||
} | ||
"query": "avg(last_5m):avg:active_directory.ldap.bind_time{*} by {host} > 30", | ||
"tags": [ | ||
"integration:active_directory" | ||
], | ||
"type": "query alert" | ||
} | ||
} |
71 changes: 39 additions & 32 deletions
71
active_directory/assets/monitors/ldap_binding_successful.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,33 +1,40 @@ | ||
{ | ||
"name": "[Active Directory] Anomalous number of successful LDAP bindings for host: {{host.name}}", | ||
"type": "query alert", | ||
"query": "avg(last_12h):anomalies(avg:active_directory.ldap.successful_binds_persec{*} by {host}, 'agile', 4, direction='both', alert_window='last_15m', interval=120, count_default_zero='true', seasonality='hourly') >= 1", | ||
"message": "There is an anomalous number of successful LDAP bindings for host: {{host.name}} ", | ||
"tags": [ | ||
"integration:active_directory" | ||
], | ||
"options": { | ||
"notify_audit": false, | ||
"locked": false, | ||
"timeout_h": 0, | ||
"new_host_delay": 300, | ||
"require_full_window": true, | ||
"notify_no_data": false, | ||
"renotify_interval": 0, | ||
"escalation_message": "", | ||
"no_data_timeframe": null, | ||
"include_tags": true, | ||
"thresholds": { | ||
"critical": 1, | ||
"critical_recovery": 0 | ||
}, | ||
"threshold_windows": { | ||
"trigger_window": "last_15m", | ||
"recovery_window": "last_15m" | ||
} | ||
}, | ||
"priority": null, | ||
"recommended_monitor_metadata": { | ||
"description": "Notifies when Active Directory number of successful LDAP bindings becomes anomalous for a specific host." | ||
} | ||
} | ||
"version": 2, | ||
"created_at": "2021-04-20", | ||
"last_updated_at": "2021-04-20", | ||
"title": "Anomalous number of successful LDAP bindings for host: {{host.name}}", | ||
"tags": [ | ||
"integration:active-directory" | ||
], | ||
"description": "Notifies when Active Directory number of successful LDAP bindings becomes anomalous for a specific host.", | ||
"definition": { | ||
"message": "There is an anomalous number of successful LDAP bindings for host: {{host.name}} ", | ||
"name": "[Active Directory] Anomalous number of successful LDAP bindings for host: {{host.name}}", | ||
"options": { | ||
"escalation_message": "", | ||
"include_tags": true, | ||
"locked": false, | ||
"new_host_delay": 300, | ||
"no_data_timeframe": null, | ||
"notify_audit": false, | ||
"notify_no_data": false, | ||
"renotify_interval": 0, | ||
"require_full_window": true, | ||
"threshold_windows": { | ||
"recovery_window": "last_15m", | ||
"trigger_window": "last_15m" | ||
}, | ||
"thresholds": { | ||
"critical": 1, | ||
"critical_recovery": 0 | ||
}, | ||
"timeout_h": 0 | ||
}, | ||
"priority": null, | ||
"query": "avg(last_12h):anomalies(avg:active_directory.ldap.successful_binds_persec{*} by {host}, 'agile', 4, direction='both', alert_window='last_15m', interval=120, count_default_zero='true', seasonality='hourly') >= 1", | ||
"tags": [ | ||
"integration:active_directory" | ||
], | ||
"type": "query alert" | ||
} | ||
} |
69 changes: 38 additions & 31 deletions
69
active_directory/assets/monitors/ldap_client_sessions.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,33 +1,40 @@ | ||
{ | ||
"name": "[Active Directory] Anomalous number of sessions for connected LDAP clients for host: {{host.name}}", | ||
"type": "query alert", | ||
"query": "avg(last_12h):anomalies(avg:active_directory.ldap.client_sessions{*} by {host}, 'agile', 5, direction='both', alert_window='last_15m', interval=120, count_default_zero='true', seasonality='daily') >= 1", | ||
"message": "There is an anomalous number of sessions for connected LDAP clients for host: {{host.name}} ", | ||
"tags": [ | ||
"integration:active_directory" | ||
], | ||
"options": { | ||
"notify_audit": false, | ||
"locked": false, | ||
"timeout_h": 0, | ||
"new_host_delay": 300, | ||
"require_full_window": true, | ||
"notify_no_data": false, | ||
"renotify_interval": 0, | ||
"escalation_message": "", | ||
"no_data_timeframe": null, | ||
"include_tags": true, | ||
"thresholds": { | ||
"critical": 1, | ||
"critical_recovery": 0 | ||
}, | ||
"threshold_windows": { | ||
"trigger_window": "last_15m", | ||
"recovery_window": "last_15m" | ||
} | ||
}, | ||
"priority": null, | ||
"recommended_monitor_metadata": { | ||
"description": "Notifies when Active Directory number of sessions for connected LDAP clients becomes anomalous for a specific host." | ||
} | ||
"version": 2, | ||
"created_at": "2021-04-20", | ||
"last_updated_at": "2021-04-20", | ||
"title": "Anomalous number of sessions for connected LDAP clients for host: {{host.name}}", | ||
"tags": [ | ||
"integration:active-directory" | ||
], | ||
"description": "Notifies when Active Directory number of sessions for connected LDAP clients becomes anomalous for a specific host.", | ||
"definition": { | ||
"message": "There is an anomalous number of sessions for connected LDAP clients for host: {{host.name}} ", | ||
"name": "[Active Directory] Anomalous number of sessions for connected LDAP clients for host: {{host.name}}", | ||
"options": { | ||
"escalation_message": "", | ||
"include_tags": true, | ||
"locked": false, | ||
"new_host_delay": 300, | ||
"no_data_timeframe": null, | ||
"notify_audit": false, | ||
"notify_no_data": false, | ||
"renotify_interval": 0, | ||
"require_full_window": true, | ||
"threshold_windows": { | ||
"recovery_window": "last_15m", | ||
"trigger_window": "last_15m" | ||
}, | ||
"thresholds": { | ||
"critical": 1, | ||
"critical_recovery": 0 | ||
}, | ||
"timeout_h": 0 | ||
}, | ||
"priority": null, | ||
"query": "avg(last_12h):anomalies(avg:active_directory.ldap.client_sessions{*} by {host}, 'agile', 5, direction='both', alert_window='last_15m', interval=120, count_default_zero='true', seasonality='daily') >= 1", | ||
"tags": [ | ||
"integration:active_directory" | ||
], | ||
"type": "query alert" | ||
} | ||
} |
37 changes: 37 additions & 0 deletions
37
activemq/assets/monitors/activemq_artemis_high_disk_store.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,37 @@ | ||
{ | ||
"version": 2, | ||
"created_at": "2021-03-18", | ||
"last_updated_at": "2021-03-18", | ||
"title": "High disk store percentage on {{host.name}}", | ||
"tags": [ | ||
"integration:activemq" | ||
], | ||
"description": "Notify your team when disk store usage exceeds thresholds.", | ||
"definition": { | ||
"message": "Please check host {{host.name}}, as disk store usage is abnormally high at {{value}}.", | ||
"name": "[ActiveMQ Artemis] High disk store percentage on {{host.name}}", | ||
"options": { | ||
"escalation_message": "", | ||
"include_tags": true, | ||
"locked": false, | ||
"new_host_delay": 300, | ||
"no_data_timeframe": null, | ||
"notify_audit": false, | ||
"notify_no_data": false, | ||
"renotify_interval": 0, | ||
"require_full_window": true, | ||
"silenced": {}, | ||
"thresholds": { | ||
"critical": 0.95, | ||
"warning": 0.8 | ||
}, | ||
"timeout_h": 0 | ||
}, | ||
"priority": null, | ||
"query": "avg(last_10m):avg:activemq.artemis.disk_store_usage_pct{*} > 0.95", | ||
"tags": [ | ||
"integration:activemq" | ||
], | ||
"type": "query alert" | ||
} | ||
} |
41 changes: 41 additions & 0 deletions
41
activemq/assets/monitors/activemq_artemis_unrouted_messages.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,41 @@ | ||
{ | ||
"version": 2, | ||
"created_at": "2021-03-18", | ||
"last_updated_at": "2021-03-18", | ||
"title": "High number of unrouted messages on address {{address.name}}", | ||
"tags": [ | ||
"integration:activemq" | ||
], | ||
"description": "Notify your team when unrouted messages are unexpected.", | ||
"definition": { | ||
"message": "The number of unrouted messages on address {{address.name}} has exceeded its normal range to {{value}} messages.", | ||
"name": "[ActiveMQ Artemis] High number of unrouted messages on address {{address.name}}", | ||
"options": { | ||
"escalation_message": "", | ||
"include_tags": true, | ||
"locked": false, | ||
"new_host_delay": 300, | ||
"no_data_timeframe": null, | ||
"notify_audit": false, | ||
"notify_no_data": false, | ||
"renotify_interval": 0, | ||
"require_full_window": true, | ||
"silenced": {}, | ||
"threshold_windows": { | ||
"recovery_window": "last_15m", | ||
"trigger_window": "last_15m" | ||
}, | ||
"thresholds": { | ||
"critical": 1, | ||
"critical_recovery": 0 | ||
}, | ||
"timeout_h": 0 | ||
}, | ||
"priority": null, | ||
"query": "avg(last_4h):anomalies(avg:activemq.artemis.address.unrouted_messages{*} by {address}.as_count(), 'agile', 2, direction='both', alert_window='last_15m', interval=60, count_default_zero='true', seasonality='hourly') >= 1", | ||
"tags": [ | ||
"integration:activemq" | ||
], | ||
"type": "query alert" | ||
} | ||
} |
30 changes: 0 additions & 30 deletions
30
activemq/assets/recommended_monitors/activemq_artemis_high_disk_store.json
This file was deleted.
Oops, something went wrong.
34 changes: 0 additions & 34 deletions
34
activemq/assets/recommended_monitors/activemq_artemis_unrouted_messages.json
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.