Skip to main content

Event reception format

Alert template

In case of server monitoring, the alert template differs exceptionally.

  • Product Type: Server
  • Event Type: Server alert, Process alert, Log file/Windows event notification
  • Event Channel : SMS, Mobile, 3rd party plugin , Plugin

Event Title

Event title format
[Level][INFRA] ProjectName ServerName EventTitle
Event title example
[Info][INFRA] Server Project TC-0-1-8081 CPU Used > 70%
Note

If ServerName has not been specified, it is omitted from the event title.

Event Message

The data can be included in the event message. Always include it in the message if optional is false. If optional is true, the corresponding data appears if available.

Event message example
Project Name: Application project
Project Code: 3
Server Name: TC-0-1-8081
Event Message: [TEST] RECOVERED: Memory is too high. less than 10%
Event ON Time: 2022-04-12 18:53:24 +0900
Event OFF Time: 2022-04-12 18:53:24 +0900
Alert Type:
Metric Name: memory
Metric Value: 20
Metric Threshold: 10
Stateful: true

The following lists the event message components.

EnKoOptionalDescription
Project Name프로젝트 이름false-
Project Code프로젝트 Codefalse-
Server NameAgent nametrueoname
Event MessageEvent Messagefalse-
Event ON Time이벤트 발생 시간falseIn 2022-04-13 10:40:49 +0900, +0900 means GMT.
Event OFF Time이벤트 해제 시간trueIn 2022-04-13 10:40:49 +0900, +0900 means GMT.
Elapsed TimeEvent occurrence durationtrue-
Alert Type이벤트 종류true-
Policy NameAlert policy nametrue-
Metric Name메트릭스 이름trueThe metrics name used to judge the event condition.
Metric Value메트릭스 값trueIf the metric value exceeds the metric threshold, the event occurrence condition is met.
Metric Threshold메트릭스 임계치trueIf the metric value exceeds the metric threshold, the event occurrence condition is met.
Event RuleEvent Ruletrue-
Alert Type이벤트 종류trueField to specify the event type.
Event Target Filter이벤트 대상 선택true(Metrics Alert) Check the event conditions only for metrics collected in specific targets.
StatefulResolved event notificationtrueIf the resolved event alert is being used, the value is true. Otherwise, the value is false.
Repeat Count이벤트 반복 횟수true(Metrics Alert) An event occurs only when the event condition meets the event repetitions count for the event repetition time.
Repeat Duration이벤트 반복 시간true(Metrics Alert) An event occurs only when the event condition meets the event repetitions count for the event repetition time. It is a resolved event alert.
IPIPtrue-
Log ContentLog Contenttrue-
Log SourceLog Sourcetrue-
CPUCPUtrue-
CPU_load1CPU_load1true-
CPU_loadPerCoreCPU_load1true-
MemoryMemorytrue-
SwapSwaptrue-
Disk Name/Used Percent/Free Size/IO PercentDisk Name/Used Percent/Free Size/IO Percenttrue-
Traffic Name/Bps/PpsName/Bps/Ppstrue-
Acknowledge Message/Time/NameAcknowledge Message/Time/Nametrue-

Server alert title and message

The server alert provides only the event message with no event title.

Server alert

Event TypeEvent LevelEvent MessageEvent Off Message
RestartCriticalSystem Rebooted"Not supported
Not receivedWarningAgent No Data"Not supported
PortWarningPort ${port} is down""Port ${port} is up"
Port (IP can be identified)WarningIP ${ip} Port ${port} is down""IP ${ip} Port ${port} is up"
Network IOPSWarning or CriticalNETWORK ${deviceId} pps > ${value} pps"-
Network BPSWarning or CriticalNETWORK ${deviceId} bps > ${value} ps"-
Disk I/OWarning or CriticalDisk ${mountPoint} IO Usage > ${value} %"-
Disk UsedWarning or CriticalDisk ${mountPoint} Used > ${value} %"-
inodeWarning or CriticalDisk ${mountPoint} inode usage > ${value} %"-
CPUWarning or CriticalCPU Used > ${value} %"-
MemoryWarning or CriticalMemory Used > ${value} %"-
stealWarning or CriticalCPU Steal > ${value} %"-
SwapWarning or CriticalSwap Used > ${value} %"-

Process alert

Event TypeEvent LevelEvent MessageEvent Off Message
Process count alertWarning or CriticalProcess ${processName} Count >= ${value}""Process ${groupName} Count < ${value}"
Process count criticalWarning or CriticalProcess ${processName} Count < ${value}""Process ${groupName} Count >= ${value}"
Process CPUWarning or CriticalProcess ${processName} CPU > ${value}"-
Process MemoryWarning or CriticalProcess ${processName} Memory > ${value}"-

Log file and Windows events

Event TypeEvent LevelEvent MessageEvent Off Message
Event TypeEvent LevelEvent MessageEvent Off Message
LOG_DEFAULTWarning or CriticalLOG ${logContent}"-
LOG_FILEWarning or CriticalLOG File: ${filePath}, Keyword : ${keyword}, [Event] ${logContent}"-
LOG_WINDOW_EVENTWarning or CriticalLOG ${logContent}"-
LOG_AUDITWarning or CriticalAUDIT ${logContent}"-
LOG_SCRIPTWarning or CriticalSCRIPT ${logContent}"-