We have a server/device that has expected high CPU utilisation overnight, is there a way in SL1 for us to suppress this CPU Utilisation event on this server/device for a few hours during the night when high CPU utilisation is expected ? We want it to have the standard threshold for all other times of the day.
Solved
Event Suppression for CPU Util overnight
Best answer by jchivers
Hello,
There are a number of ways of achieving this, here are four:
- If CPU utilization follows a fairly consistent pattern across the day, then change the CPU collection object to enable Deviation Alerting. This will create a threshold for each hour of day and day of the week. After (usually) 2 weeks, it will learn that high CPU usage over night is normal and change the threshold to stop alerting. Introduction to Dynamic Application Development
- Create two Device Templates, one of the day and one for the night, each with different threshold values for the CPU collection object. The have RBA schedule a script in the evening and morning to apply the relevant template.
- Revise the RBA Automation Policy for the CPU events to use a schedule so that RBA only reacts to the CPUI event during the day.
- If this use case becomes common for you, consider modifying the PowerFlow event SyncPack to include a lookup table for event classes that should only become incidents based oon a set schedule.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.