Hi Team,
My requirement is to create a workflow for sending daily health checks. The health checks include 5 services from cyberark; CPU, Memory, & Disk Usage for 3 different hosts.
For the above conditions I have already created a dashboard (DQL) with the help of data explorer. Could someone clarify me why the DQL that shows output in the dashboard is not giving away the output in Workflows?
Also please help me with the DQL !
DQLs for your reference:
1) Services Availability:
timeseries { `OS Service availability` = avg(dt.osservice.availability, scalar: true, filter: { (host.name == "Host1") AND ((dt.osservice.name == "CyberArkPrivilegeCloudSecureTunnel") OR (dt.osservice.name == "CyberArk Privileged Session Manager") OR (dt.osservice.name == "CyberArkManagementAgent") OR (dt.osservice.name == "CyberArk Central Policy Manager Scanner") OR (dt.osservice.name == "CyberArk Password Manager")) }), availability = avg(dt.osservice.availability, scalar: true, filter: { ((host.name == "Host2") OR (host.name == "Host3")) AND ((dt.osservice.name == "CyberArkPrivilegeCloudSecureTunnel") OR (dt.osservice.name == "CyberArk Privileged Session Manager") OR (dt.osservice.name == "CyberArkManagementAgent")) }) }, by: { host.name, dt.osservice.name, dt.osservice.status }, union: true
| sort host.name asc
//| limit 20
|fieldsrename Services = dt.osservice.name
|fieldsrename Hosts = host.name
|Fieldsrename Status = dt.osservice.status
2) Site Availability:
timeseries series = avg(dt.synthetic.http.availability),
by:{ dt.synthetic.monitored_entity_ids,
dt.entity.http_check,
dt.entity.synthetic_location
}
| fieldsAdd monitor_name = entityName(dt.entity.http_check)
| filter contains(monitor_name, "Cyberark")
| fieldsAdd availability = arrayAvg(series)
3) CPU Usage:
timeseries {cpu_usage = avg(dt.host.cpu.usage)},
by: { dt.entity.host },
filter: in(dt.entity.host, classicEntitySelector("type(host),entityName.in(\"Host1\",\"Host2\",\"Host3\")")
),
nonempty: true
| fieldsAdd host_name = entityName(dt.entity.host)
| fieldsAdd cpu_avg = arrayAvg(cpu_usage)
| sort host_name asc
| fieldsRename Host = host_name
| fieldsrename Cpu.usage = cpu_usage
| fieldsrename Cpu.avg = cpu_avg
