LN
Alerting
MYSQL Alerts for review
41000
Frequency
SELECT
gateway,
probe,
managed_entity,
sampler,
dataview,
COUNT(*) AS "Alert Count",
MIN(FROM_UNIXTIME(timestamp)) AS "first Alert",
MAX(FROM_UNIXTIME(timestamp)) AS "last Alert",
MAX(severity) AS "Max Severity",
CONCAT(ROUND((COUNT(*) / a.countrows * 100),1), "%") AS "Percent of all alerts"
FROM
(
SELECT *,
FROM_UNIXTIME(timestamp) AS "alerttime",
CONCAT(gateway,probe,managed_entity, sampler, dataview) AS "Identifier"
FROM event_table et
JOIN (
SELECT COUNT(*) AS countrows
FROM event_table et
WHERE et.severity >=
AND FROM_UNIXTIME(timestamp) > DATE_ADD(NOW(), INTERVAL -
HOUR)
) AS therowcount
WHERE et.severity >=
AND FROM_UNIXTIME(timestamp) > DATE_ADD(NOW(), INTERVAL -
HOUR)
) as a
GROUP BY a.Identifier, timestamp DIV
HAVING COUNT(*) >
ORDER BY COUNT(*) DESC;
History Frequency Report
SELECT
DATE_FORMAT(MIN(FROM_UNIXTIME(timestamp)), '%d-%m-%y') AS "DATE",
COUNT(*) AS "Alert Count"
FROM
(SELECT *,
FROM_UNIXTIME(timestamp) AS "alerttime",
CONCAT(gateway,probe,managed_entity, sampler, dataview) AS "Identifier"
FROM event_table et
WHERE et.severity >= 2
AND FROM_UNIXTIME(timestamp) > DATE_ADD(NOW(), INTERVAL -
MONTH)
) AS allevents
GROUP BY timestamp DIV 86400
ORDER BY timestamp DIV 86400 DESC
LIMIT 0,365
true
true
ORACLE Alerts for review
41000
Frequency
SELECT a.identifier,
a.gateway,
a.probe,
a.managed_entity,
a.sampler, a.dataview,
MIN(UNIX_TS_TO_DATE(timestamp)) AS first_alert,
MAX(UNIX_TS_TO_DATE(timestamp)) AS last_alert,
MAX(severity) AS max_severity,
COUNT(*) AS alert_count
FROM (SELECT gateway, probe, managed_entity, sampler, dataview, severity, timestamp, UNIX_TS_TO_DATE(timestamp) AS alerttime, gateway ||probe ||managed_entity || sampler || dataview AS identifier FROM event_table
WHERE severity >= 2 and UNIX_TS_TO_DATE(timestamp) > sysdate - INTERVAL '24' HOUR) a
GROUP BY a.identifier, a.gateway, a.probe, a.managed_entity, a.sampler, a.dataview, (timestamp/ 60)
HAVING count(*) > 5
ORDER BY COUNT(*) DESC
History Frequency Report
SELECT
MIN(UNIX_TS_TO_DATE(timestamp)) AS "DATE",
COUNT(*) AS "Alert Count"
FROM
(SELECT *,
UNIX_TS_TO_DATE(timestamp) AS "alerttime",
CONCAT(managed_entity, dataview) AS "Identifier"
FROM event_table et
WHERE et.severity >= 2
AND UNIX_TS_TO_DATE(timestamp) > sysdate - INTERVAL '
' MONTH ) allevents
GROUP BY (timestamp / 86400)
ORDER BY (timestamp / 86400) DESC
LIMIT 0,365
true
true
geneos
+en+52nDH3cn
itrscsinternal-cluster.cluster-cjwb80e4ncmc.eu-west-1.rds.amazonaws.com
geneos
/var/log/mysqld.log
true
5
2
120
24
12