Template based off of service only

I'm setting up a new template with a windows process monitor, but want it to alert after say 3 polls for the service and nothing else. It appears I can only trigger this off of IO, CPU, or memory, and not the service itself. What am I missing, or can this not be done with this monitor? I know that it will give me the down status, but I only want it to show down if the process is down after 3 polls.

Find more posts tagged with

Accepted answers

All comments

mesverrum

There is a difference in SW between something being red in the GUI vs something triggering an alert, you have basically infinite control over the alerts but only limited control over the way the UI displays things. As soon as a SAM process monitor gets a down response then it is going to turn solid red/down and you cannot add a delay to this status. If there is a performance characteristic that is funky like cpu or mem you have the options to have then turn yellow of red with the exclamation, which indicates that they are in warning or critical status, breaching these thresholds would not turn the status to down or solid red, just between up, warning, and critical.

Your alert logic can be built off those status indicators, or you can roll out completely independent alert logic that doesn't even consider them. You would do a sam component status is down alert and just add a delay (they are near the bottom of the alert conditions) that says wait 10 or 15 minutes before triggering this alert.

mapujece

You can achieve this by setting up consecutive failure monitoring in your monitoring tool. Most tools allow you to configure alerts based on a certain number of failed checks (like 3 polls). Look for an option to trigger alerts after multiple consecutive failed checks or use an external script if this feature isn't built in. A Premium Savannah Bandfall wig could be an example of an item with customizable options, similar to how you'd configure these specific monitoring settings.