Event reception format
Alert template
In case of server monitoring, the alert template differs exceptionally.
- Product Type: Server
- Event Type: Server alert, Process alert, Log file/Windows event notification
- Event Channel : SMS, Mobile, 3rd party plugin , Plugin
Event Title
Event title format
[Level][INFRA] ProjectName ServerName EventTitle
Event title example
[Info][INFRA] Server Project TC-0-1-8081 CPU Used > 70%
Note
If ServerName has not been specified, it is omitted from the event title.
Event Message
The data can be included in the event message. Always include it in the message if optional is false. If optional is true, the corresponding data appears if available.
Event message example
Project Name: Application project
Project Code: 3
Server Name: TC-0-1-8081
Event Message: [TEST] RECOVERED: Memory is too high. less than 10%
Event ON Time: 2022-04-12 18:53:24 +0900
Event OFF Time: 2022-04-12 18:53:24 +0900
Alert Type:
Metric Name: memory
Metric Value: 20
Metric Threshold: 10
Stateful: true
The following lists the event message components.
| En | Ko | Optional | Description |
|---|---|---|---|
| Project Name | 프로젝트 이름 | false | - |
| Project Code | 프로젝트 Code | false | - |
| Server Name | Agent name | true | oname |
| Event Message | Event Message | false | - |
| Event ON Time | 이벤트 발생 시간 | false | In 2022-04-13 10:40:49 +0900, +0900 means GMT. |
| Event OFF Time | 이벤트 해제 시간 | true | In 2022-04-13 10:40:49 +0900, +0900 means GMT. |
| Elapsed Time | Event occurrence duration | true | - |
| Alert Type | 이벤트 종류 | true | - |
| Policy Name | Alert policy name | true | - |
| Metric Name | 메트릭스 이름 | true | The metrics name used to judge the event condition. |
| Metric Value | 메트릭스 값 | true | If the metric value exceeds the metric threshold, the event occurrence condition is met. |
| Metric Threshold | 메트릭스 임계치 | true | If the metric value exceeds the metric threshold, the event occurrence condition is met. |
| Event Rule | Event Rule | true | - |
| Alert Type | 이벤트 종류 | true | Field to specify the event type. |
| Event Target Filter | 이벤트 대상 선택 | true | (Metrics Alert) Check the event conditions only for metrics collected in specific targets. |
| Stateful | 해결된 이벤트 알림 | true | If the resolved event alert is being used, the value is true. Otherwise, the value is false. |
| Repeat Count | 이벤트 반복 횟수 | true | (Metrics Alert) An event occurs only when the event condition meets the event repetitions count for the event repetition time. |
| Repeat Duration | 이벤트 반복 시간 | true | (Metrics Alert) An event occurs only when the event condition meets the event repetitions count for the event repetition time. It is a resolved event alert. |
| IP | IP | true | - |
| Log Content | Log Content | true | - |
| Log Source | Log Source | true | - |
| CPU | CPU | true | - |
| CPU_load1 | CPU_load1 | true | - |
| CPU_loadPerCore | CPU_load1 | true | - |
| Memory | Memory | true | - |
| Swap | Swap | true | - |
| Disk Name/Used Percent/Free Size/IO Percent | Disk Name/Used Percent/Free Size/IO Percent | true | - |
| Traffic Name/Bps/Pps | Name/Bps/Pps | true | - |
| Acknowledge Message/Time/Name | Acknowledge Message/Time/Name | true | - |
Server alert title and message
The server alert provides only the event message with no event title.
Server alert
| Event Type | Event Level | Event Message | Event Off Message |
|---|---|---|---|
| Restart | Critical | System Rebooted" | Not supported |
| Not received | Warning | Agent No Data" | Not supported |
| Port | Warning | Port ${port} is down" | "Port ${port} is up" |
| Port (IP can be identified) | Warning | IP ${ip} Port ${port} is down" | "IP ${ip} Port ${port} is up" |
| Network IOPS | Warning or Critical | NETWORK ${deviceId} pps > ${value} pps" | - |
| Network BPS | Warning or Critical | NETWORK ${deviceId} bps > ${value} ps" | - |
| Disk I/O | Warning or Critical | Disk ${mountPoint} IO Usage > ${value} %" | - |
| Disk Used | Warning or Critical | Disk ${mountPoint} Used > ${value} %" | - |
| inode | Warning or Critical | Disk ${mountPoint} inode usage > ${value} %" | - |
| CPU | Warning or Critical | CPU Used > ${value} %" | - |
| Memory | Warning or Critical | Memory Used > ${value} %" | - |
| steal | Warning or Critical | CPU Steal > ${value} %" | - |
| Swap | Warning or Critical | Swap Used > ${value} %" | - |
Process alert
| Event Type | Event Level | Event Message | Event Off Message |
|---|---|---|---|
| Process count alert | Warning or Critical | Process ${processName} Count >= ${value}" | "Process ${groupName} Count < ${value}" |
| Process count critical | Warning or Critical | Process ${processName} Count < ${value}" | "Process ${groupName} Count >= ${value}" |
| Process CPU | Warning or Critical | Process ${processName} CPU > ${value}" | - |
| Process Memory | Warning or Critical | Process ${processName} Memory > ${value}" | - |
Log file and Windows events
| Event Type | Event Level | Event Message | Event Off Message |
|---|---|---|---|
| Event Type | Event Level | Event Message | Event Off Message |
| LOG_DEFAULT | Warning or Critical | LOG ${logContent}" | - |
| LOG_FILE | Warning or Critical | LOG File: ${filePath}, Keyword : ${keyword}, [Event] ${logContent}" | - |
| LOG_WINDOW_EVENT | Warning or Critical | LOG ${logContent}" | - |
| LOG_AUDIT | Warning or Critical | AUDIT ${logContent}" | - |
| LOG_SCRIPT | Warning or Critical | SCRIPT ${logContent}" | - |