topic Re: Custom Anomaly detection for Specific drives on a host in Alerting

Custom Anomaly detection for Specific drives on a host

AmitChiba — Mon, 17 May 2021 09:31:03 GMT

We are currently deploying Dynatrace in a large environment. We have a use case which requires that certain host alerts be sent to Support Team A, and other's to Support Team B, e.g. Support Team A needs to be notified if the c:\ is running out of space, but Support Team B needs to know if the D:\ is running out of space for a specific host (or group of hosts).

I have been trying to set up an Custom rule to do this, but cant seem to do so.

Is there any way that this can be achieved?

Re: Custom Anomaly detection for Specific drives on a host

pahofmann — Thu, 03 May 2018 13:57:04 GMT

You can specify custom thresholds for specific drives, but you can't create alerting profiles based on drives, as you can only tag an entire host not a drive.

You could open an enhancement request though.

Re: Custom Anomaly detection for Specific drives on a host

Shiv_Pati — Thu, 03 May 2018 14:14:10 GMT

First step would be creating 2 separate alert profiles "Team A" and "Team B", then on host level; you can select the specific drive you want to assign to each team.

Re: Custom Anomaly detection for Specific drives on a host

hayden_miedema — Thu, 03 May 2018 15:29:39 GMT

You actually can specify different settings per disk in the 'anomaly detection' settings on a specific host:

Browse to the specific host's edit page, then you can change these on a per disk basis. You would then take the approach that the other's have outlined here of setting up alerting profiles.

Thanks,
Hayden

Re: Custom Anomaly detection for Specific drives on a host

pahofmann — Thu, 03 May 2018 17:14:49 GMT

But, alerting profiles can only be based on tags, and a tag is assigned to the entire host not a single disk, so that won't work, right? Or am I missing something here?

Re: Custom Anomaly detection for Specific drives on a host

nj_njoku — Thu, 03 May 2018 17:32:22 GMT

Hey Patrick,

You are correct. Alerting Profiles can only be based on tags so this won't work. I believe his best option to handle this is to create an alerting profile that sends both to a recipient and that recipient should have an email forwarding rule based on the contents of the email notification e.g from noreply@dynatrace, subject contains whatever set for the subject of the notification and if body contains "disk C:\" to team A and the "disk D:\" to team B (this is an example do not use this rule verbatim)

Thanks

Re: Custom Anomaly detection for Specific drives on a host

hayden_miedema — Thu, 03 May 2018 17:34:13 GMT

Ah yes, good point Patrick. My mistake on not seeing that specific use case.

Re: Custom Anomaly detection for Specific drives on a host

AmitChiba — Fri, 04 May 2018 06:56:56 GMT

Thanks for the responses. @Patrick H. I will open an RFE for this.

Re: Custom Anomaly detection for Specific drives on a host

pahofmann — Mon, 16 Oct 2023 15:03:53 GMT

The RFE can be foudn here:

https://community.dynatrace.com/content/idea/201795/ability-to-tag-host-attributes-such-as-disk-drives-1.html

Re: Custom Anomaly detection for Specific drives on a host

CharlesWu — Tue, 23 Jun 2020 22:58:56 GMT

Using "Custom disk-detection rule" creates some custom disk rules for specific drives or mount points, then create some alerting profiles by using the "Custom disk-detection rule" as filters, then create the notification with these different alerting profiles, which will triggers alerts to different recipients, repectively, while tagging on drives or mount points is not available. I tested and it works for me.