add custom dimension using partition

[Vijayt]

we are using  infrastructure mode and have only access to classic dashboard 

i am trying to group  processes. and trying to find out unusual process to highlight 

for example.  Tag OS process instance a tag ,  scanning processes another tag, and others 

builtin:tech.generic.cpu.usage:splitBy("dt.entity.host")
:partition("processgroup",value("antivirus",
in("dt.entity.process_group_instance",entitySelector("type(PROCESS_GROUP_INSTANCE) AND tag(~"pgn:antivirus~")"))))

but i get 

Metric selector parse error: invalid value condition `in("dt.entity.process_group_instance",entitySelector("type(PROCESS_GROUP_INSTANCE) AND tag(~"pgn:antivirus~")"))`.

basically use tag as dimension to group  metrics in custom manner . any workaround  

[Mizső]

Hi @Vijayt,

Maybe I do not understand what would you like to achive with partition transformation

Filter for specific tag on process goup instances:

builtin:tech.generic.cpu.usage:parents:filter(and(or(in("dt.entity.process_group_instance",entitySelector("type(process_group_instance),tag(~"PG:Apache Web Server~")"))))):splitBy("dt.entity.host","dt.entity.process_group_instance"):sort(value(auto,descending))

I hope it helps.

Best regards,

János

[Vijayt]

well. i can get specific process instance metric.  but it will show only specific process results .

let us say if i want  to group similar process in 4 groups . then i want specify manual via partition transformation . so that i can show . 

can entity selector or tags  be used in partition condition ?

[Mizső]

Hi @Vijayt 

I thnik you can use for this the entity selector and tags. Lets assume you have 4 tags for 4 groups.

pgn:antivirus, pgn:apache, pgn:osprocess, pgn:scanning. Use the automatic tagging by rules or manual tagging ( not recommendded).

Metric expression could be:

builtin:tech.generic.cpu.usage:parents:filter(and(or(in("dt.entity.process_group_instance",entitySelector("type(process_group_instance),tag(~"pgn:antivirus~")"))))):splitBy("dt.entity.host","dt.entity.process_group_instance"):sort(value(auto,descending))

builtin:tech.generic.cpu.usage:parents:filter(and(or(in("dt.entity.process_group_instance",entitySelector("type(process_group_instance),tag(~"pgn:apache~")"))))):splitBy("dt.entity.host","dt.entity.process_group_instance"):sort(value(auto,descending))

builtin:tech.generic.cpu.usage:parents:filter(and(or(in("dt.entity.process_group_instance",entitySelector("type(process_group_instance),tag(~"pgn:osprocess~")"))))):splitBy("dt.entity.host","dt.entity.process_group_instance"):sort(value(auto,descending))

builtin:tech.generic.cpu.usage:parents:filter(and(or(in("dt.entity.process_group_instance",entitySelector("type(process_group_instance),tag(~"pgn:scanning~")"))))):splitBy("dt.entity.host","dt.entity.process_group_instance"):sort(value(auto,descending))

I use partition transformation for value partioion only eg. from the documentation:

:partition(
"Action duration",
value("slow",gt(200)),
value("fast",lt(100)),
value("normal",otherwise)
)

I hope it helps.

Best regards,

János 

[Vijayt]

thanks Mizso for the reply. yes i use same method