Hello folks,
I am trying to determine a good method for monitoring a particular process on a Terminal Server(Citrix). The builtin process monitor does not do what we needed so I built a script monitor which is working really well. We are monitoring an application for excessive memory usage and configured the script to exit with a warning when memory usage exceeds 400 megs per process. The script loops through each process name we defined in the script, and when it finds one using the defined variable amount, (400 megs), it builds a variable. with the following info:
Process Owner = Anonymous User account (Citrix anon app)
Convert the Anon account to a Domain user account.
Megs of Memory being used by the user's process.
It combines all of this, and then exits the script with the message defined as the variable, and I am also counting the users, so the statistic is set to the sum of that number.
The system now throws out an alert to email. What I am looking to do now is only resend an alert if the Statistic or message information has changed. I had orion configured to resend the alert until it was acknowledged and realized that sometimes the system changed, such as another user logged on and consumed memory, or the user consumed more memory than the first alert and other times it was resending the same information. Resending the same info has been consistent so I turned off the resend alert. However I am being asked to resend the alert when information is changed.
What I would like is to configure orion to only resend the alert if there has been a change, such as an additional user is now above 400 megs, or the original useage has changed but still in the warning.
I am trying to utilize orion for this, instead of writing values to the system and running a second monitor to look for changes. I am looking for ideas on the best method. I have ideas of my own, but I'd like to throw this out to the community to see if anyone has come up with a great solution for this type of thing. I may be overlooking something really easy with alert configuration as well.... Any input would be greatly appreciated.
SD