Workflow for services

Blues_1 — Wed, 13 May 2026 05:52:44 GMT

Hi Team,

My requirement is to create a workflow for sending daily health checks. The health checks include 5 services from cyberark; CPU, Memory, & Disk Usage for 3 different hosts.

For the above conditions I have already created a dashboard (DQL) with the help of data explorer. Could someone clarify me why the DQL that shows output in the dashboard is not giving away the output in Workflows?

Also please help me with the DQL !

DQLs for your reference:

1) Services Availability:
timeseries { `OS Service availability` = avg(dt.osservice.availability, scalar: true, filter: { (host.name == "Host1") AND ((dt.osservice.name == "CyberArkPrivilegeCloudSecureTunnel") OR (dt.osservice.name == "CyberArk Privileged Session Manager") OR (dt.osservice.name == "CyberArkManagementAgent") OR (dt.osservice.name == "CyberArk Central Policy Manager Scanner") OR (dt.osservice.name == "CyberArk Password Manager")) }), availability = avg(dt.osservice.availability, scalar: true, filter: { ((host.name == "Host2") OR (host.name == "Host3")) AND ((dt.osservice.name == "CyberArkPrivilegeCloudSecureTunnel") OR (dt.osservice.name == "CyberArk Privileged Session Manager") OR (dt.osservice.name == "CyberArkManagementAgent")) }) }, by: { host.name, dt.osservice.name, dt.osservice.status }, union: true
| sort host.name asc
//| limit 20
|fieldsrename Services = dt.osservice.name
|fieldsrename Hosts = host.name
|Fieldsrename Status = dt.osservice.status

2) Site Availability:
timeseries series = avg(dt.synthetic.http.availability),
by:{ dt.synthetic.monitored_entity_ids,
dt.entity.http_check,
dt.entity.synthetic_location
}
| fieldsAdd monitor_name = entityName(dt.entity.http_check)
| filter contains(monitor_name, "Cyberark")
| fieldsAdd availability = arrayAvg(series)

3) CPU Usage:
timeseries {cpu_usage = avg(dt.host.cpu.usage)},
by: { dt.entity.host },
filter: in(dt.entity.host, classicEntitySelector("type(host),entityName.in(\"Host1\",\"Host2\",\"Host3\")")
),
nonempty: true
| fieldsAdd host_name = entityName(dt.entity.host)
| fieldsAdd cpu_avg = arrayAvg(cpu_usage)
| sort host_name asc
| fieldsRename Host = host_name
| fieldsrename Cpu.usage = cpu_usage
| fieldsrename Cpu.avg = cpu_avg

Re: Workflow for services

AntonPineiro — Tue, 12 May 2026 12:28:30 GMT

Hi,

Looks like a use case for Site Reliability Guardian.

Best regards

Re: Workflow for services

Blues_1 — Tue, 12 May 2026 13:30:25 GMT

Simple workflow isnt enough? Or does this adds up any cost ?

topic Re: Workflow for services in Automations

Workflow for services

Re: Workflow for services

Re: Workflow for services