cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Threshold: warning or Severe

suraj_kumar_gup
Inactive

Hi,

I am looking to have an incident created for warning and severe on the same incident.

Upper Warning should be 80%

Upper Severe should be 90%

while creating incident under threshold tab have selected threshold as : "Warning Or Sever" aggregation : "Avg" and provided threshold for both upper warning and severe as mentioned above. But it seems it is alarming only for warning not for severe even the utilization crossed 100%.

Regards,
Suraj Gupta

3 REPLIES 3

Babar_Qayyum
Leader

Hello Suraj,

warning or severe: A warning triggers when the warning threshold is exceeded. No additional incident occurs if the severe threshold is exceeded.

If you want an incident to be thrown if a severe condition occurs after a warning condition, you need to define a separate incident rule with the severe threshold.

Reveiw the below link for more understading.

https://www.dynatrace.com/support/doc/appmon/admin...

Regards,

Babar

suraj_kumar_gup
Inactive

Hi Babar,

Thanks for the clarification, my assumption was right. what should be the right logic? OR?

Regards,
Suraj Gupta

Hello Suraj,

The logical operator to combine multiple conditions: and, or. You can select an operator only if two or more measures are listed.

Multiple conditions can be concatenated logically. When the condition is evaluated, no operator precedence (AND stronger than OR) is applied:


  • If the first FALSE condition is followed by an AND concatenation, then the complete expression evaluates to FALSE.
  • If the first FALSE condition occurs after an AND concatenation, then the complete expression evaluates to FALSE.
  • If the first TRUE condition is followed by an OR concatenation, then the complete expression evaluates to TRUE.

For example:


  • true AND false OR true — evaluates to false
  • true OR false AND true — evaluates to true
  • true OR false AND false — evaluates to true
  • false AND true — evaluates to false

If measures are combined with AND, their splittings have to match. If the first condition is violated by a measurement from an Agent, and the second condition is violated by a measurement from a different Agent, the combination will not be seen as violating.

Just read the below documentation for more insight.

https://www.dynatrace.com/support/doc/appmon/administration/system-profile/edit-a-system-profile/system-profile-incidents/configure-incident-rules/#conditions

Regards,

Babar