How to setup alert for OS Service Monitoring?

[ram16]

In Dynatrace, we can setup service availability monitoring. This can be achieved in two ways. 

1) Settings--->Monitoring---> OS Service Monitoring

2) Host--->Settings---> OS Service Monitoring

Once we setup the services for monitoring, we can see their status in the Host main page under "OS services analysis". By default, the service availability alert will go to "Default" alerting profile. To send the service alerts to application/infrastructure owners, please follow the below steps.

Edit the Management Zone of which the hosts are part of. 

Add a new Rule--->  Rule Type--->Monitored Entity----->Rule Applies To--->Custom Devices---->Add Condition--->property--->Custom Device Name--->Select the right operator--->Value---> Provide the service name---->Preview and make sure you see the service name appears.

You are all set. Now, the service availability alerts will trigger to the Alerting profile which is mapped to this Management zone.

[ChadTurner]

If you don't want to call out the OS Services you can use the blanket rule for the monitored entities. This assumes you have Host Groups set.

Type("os:service"), fromRelationships.runsOn(type("HOST"), tag("Host Group"))

[sundarv1]

Currently OS Services incidents are coming as P2 as it is going to Default Profile.  How can we reduce this to P3?,

[ChadTurner]

when you say 'coming as' is that in an event manager?

[sundarv1]

Currently OS service alerts is choosing default problem profile. Hence all OS service alerts is creating as P2 incident in serviceniw. My ask how do we make this slowdown alert, so P3 incident will be created in Servicenow

[ChadTurner]

okay so with your SNOW integration. So the OS Services is built in alerting, so I don't think your going to be able to change the priority out of the box in Dynatrace. What you can do, is make a custom event rule, this will then allow you to have more flexibility in the way of what the alert classification is etc... 

You can add in custom properties in the OS definition segment but it wont help you with the P rating. 

https://docs.dynatrace.com/docs/platform-modules/infrastructure-monitoring/hosts/monitoring/os-servi...

[sundarv1]

Thanks. In the customer properties how do we change event type from Availability to Slowdown?  

[ChadTurner]

If you create a custom alert by way of the metrics, you can then set the type of alert towards the bottom of the page as you set it up: 

[sundarv1]

Hi Chad

How to create metric event for OS Service issues?. Could you please share some examples?.

When OS service goes down, it needs to create a slowdown metric event

[ChadTurner]

So if you want to alert when an OS services isn't available and list it as an availability issue: 

Its really up to you, I would recommend tinkering around and setting it the way your organization will need it. 

[sundarv1]

Currently OS Service alerts are coming as Availability event.  What we are looking to create as slowdown event for our organization. Does the metric event work for OS Service?

[ChadTurner]

okay, so you would select the desired metric and then classify it as slowdown in the drop down. 

[sundarv1]

ok. if we do this - should we disable what we have done already in Settings - Monitoring - OS Services Monitoring?.

[ChadTurner]

I would yes, because the creation of this defined alert, will be induplicate to what is out of the box by way of the OS Alert Settings. 

[sundarv1]

Under OS Service monitoring we have configured services exclusion which doesn't needs to be monitored.  Does the above configuration will override exclusion, if yes how do we stop alerts for the services which is not to be monitored?.

[sundarv1]

Chad - Thanks . In the above screenshot where we are defining to send alert if OS service is not running?, 

[ChadTurner]

If you turned on Alert on missing data then that would alert if the service isnt running as there would be no availability metric theoretically. 

[sundarv1]

Hi Chad

Under OS Service monitoring we have configured services exclusion which doesn't needs to be monitored.  Does the above configuration will override exclusion?

[sundarv1]

Hi Chad

Under OS Service monitoring we have configured services exclusion which doesn't needs to be monitored.  Does the above configuration will override exclusion?

[sundarv1]

Hi Chad

Thanks.  We want specific servers not be alerted. How do we do this if we do the above metric template.

Thanks

Sundar.v

[cbaldi]

I think the best way to do that is to adjust the OS Service monitoring rule for those hosts to not Alert for those os services.

[sundarv1]

Request is with in servers we don't want few services not be alerted. This services not to be alerts fur more than 100 servers.

[sundarv1]

Hi Chad

In the custom properties how do we change event type from availablity to slowdown.  Could you please help me?

[sundarv1]

Hi Chad

For OS Services monitoring when alerts are generated , in the dynatrace console - problem

in the impacted column - OS Service is coming, not the impacted CI. How do we get that?,

Attach is the configuration.

Sundar.v

[mateusz_marek · Accepted solution]

You can also use entity selectors to choose an OS Service based on its name:

type(os:service),entityName.startsWith("<name of OS service entity>")

host on which OS service is running:

type(os:service),fromRelationship.runsOn(type(HOST),entityName.startsWith("<name of the host>"))

or name of a process, which is associated with the OS service:

type(os:service),toRelationship.runsOn(type(PROCESS_GROUP_INSTANCE),entityName.startsWith("<name of the process entity>"))

[cbaldi]

Since we organize our Management Zones around HostGroups, we find the following convenient. We have one rule for hosts in a host group and another for the OS services.

Rule 1: Monitored entity -> Hosts, Host Group equals "<host group name>"

Rule 2: type("os:service"),fromRelationship.runsOn(type("HOST"),hostGroupName("<same host group name>")

[sundarv1]

Hi Ram - How do change alerts from service availability alert to Slowdown alert for OS Services?

[ram16]

Hi @sundarv1 , I don't think it is possible from Dynatrace level. I hope you can customize the event processing rule in ServiceNow to achieve it. Unfortunately, I don't use ServiceNow. Otherwise i would've tested it to conform you.