I'm trying to set baseline threshold using an hourly baseline. I think i have to change something in the baseline threshold setting but I'm not exactly sure what to change. Can someone help?
Here what I want
Here are what I have set:
Below is an example of the alert definition for the file count monitor exceeding 1200 from 12-6am. You would then configure another alert for 6:01-whenever for your threshold of "30".
Hi acampa,
I am not sure if I understand your question, but baseline thresholds are counted from details data, so each poll contributes on them. There is no aggregation into hourly values. You can influence number of days, which is used for baseline calculation. You are using 1 day, so the baseline statistics are based on polls from last 24 hours.
Petr S.
So right now I'm using proactiveNet to monitor how many data files the are in a folder. Most of the day the number of files are below 50 but around midnight this number can spike up to 1,000 data files for a couple hours as you can see from the graph above. I want to be able to use threshold on an hourly baseline. Right now the threshold is fixed (see graph below). I want to it to be constantly changing depending on the hour. Does that make sense?
I think we're mixing terms here. SAM includes a Threshold Baseline Calculator which aids in recommending warning and critical thresholds based on historical static collection. What the image you posted above appears to be coming from BMC, and is not a baseline in the true meaning of the word. It is instead a 95th percentile and a 5th percentile measurement.
Some, but not all chart resources in Orion can be configured to also display the 95th percentile, as well as a trend line as pictured below.
You can define different thresholds for different times of day or days of week within the Advanced Alert Manager. The threshold would be a trigger condition and each threshold would require its own alert. To streamline the process simply create the first one, copy it, edit the threshold value and time/date when the alert should be active.
So if I wanted to do this hourly for a day I would need to create 24 alerts? How would I define the threshold for every hour? For example at 12:00am I want the threshold to be 1200 but at 6:00am I want the threshold to be 30.
