mtate
Contributor
13 days agoEvent Suppression for CPU Util overnight
We have a server/device that has expected high CPU utilisation overnight, is there a way in SL1 for us to suppress this CPU Utilisation event on this server/device for a few hours during the night wh...
- 12 days ago
Hello,
There are a number of ways of achieving this, here are four:
- If CPU utilization follows a fairly consistent pattern across the day, then change the CPU collection object to enable Deviation Alerting. This will create a threshold for each hour of day and day of the week. After (usually) 2 weeks, it will learn that high CPU usage over night is normal and change the threshold to stop alerting. Introduction to Dynamic Application Development
- Create two Device Templates, one of the day and one for the night, each with different threshold values for the CPU collection object. The have RBA schedule a script in the evening and morning to apply the relevant template.
- Revise the RBA Automation Policy for the CPU events to use a schedule so that RBA only reacts to the CPUI event during the day.
- If this use case becomes common for you, consider modifying the PowerFlow event SyncPack to include a lookup table for event classes that should only become incidents based oon a set schedule.