DX Infrastructure Manager

Expand all | Collapse all

Regex for CPU alarm

  • 1.  Regex for CPU alarm

    Posted 07-29-2021 06:51 AM
    Hi Folks,

    We tried to create custom regex of below mentioned alarm. But no luck.

    Average (4 samples) total cpu is now xx%, which is above the error threshold (x%).Top Processes [mcshield.exe[x]-(x%)];[SCAN64.EXE[x]-(x%

    And the value of x is different on every time.

    So please help me out.

    Thanks in advance !


  • 2.  RE: Regex for CPU alarm

    Posted 07-29-2021 08:04 AM
    Hi Folks

    Any one help me.

    Thanks !


  • 3.  RE: Regex for CPU alarm

    Broadcom Employee
    Posted 07-29-2021 08:15 AM
    Hi Akash,

    Please provide the test of a few live alarm examples for testing.

    Steve


    ------------------------------
    Support Engineer
    Broadcom
    US
    ------------------------------



  • 4.  RE: Regex for CPU alarm

    Posted 07-29-2021 09:07 AM
    Hi Stephen,

    Please find the alarm details :-

    x.x.x.x-apwsu01||3171773||WINDOWS||SAFIISTPF||Average (4 samples) total cpu is now 99.97%, which is above the error threshold (95%).Top Processes [mcshield.exe[2508]-(99.64%)];[SCAN64.EXE[2248]-(0.08%

    xx.x.x-apwsu01||3171776||WINDOWS||SAFIISRGP||Average (4 samples) total cpu is now 96.39%, which is above the error threshold (95%).Top Processes [mcshield.exe[2408]-(97.14%)];[SCAN64.EXE[7260]-(0.19%

    x.x.x.x-apepo01||3171775||WINDOWS||SAFIISTRM||Average (4 samples) total cpu is now 97.48%, which is above the error threshold (90%).Top Processes [mcshield.exe[2828]-(68.04%)];[nxlog.exe[5876]-(30.49%

    Alarm not require when the top process is - Top Processes [mcshield.exe

    Thanks in advance !



  • 5.  RE: Regex for CPU alarm

    Broadcom Employee
    Posted 07-29-2021 12:21 PM
    Edited by Stephen Danseglio 07-30-2021 09:21 AM
    Perhaps something like this which uses an AND Operator but not the string/process you dont want which in this case is mcshield.

    /^(?!.*mcshield.*)(.*total cpu is now.*)(.*Top Processes.*)/

    You can test it by sending a few sample alarms with different Top process names via the nas Status Tab window (rt-click).

    Add the regex to filter it via the IM alarm filter message field.



    Steve

    ------------------------------
    Support Engineer
    Broadcom
    US
    ------------------------------



  • 6.  RE: Regex for CPU alarm

    Posted 07-30-2021 07:03 AM
    Thanks Stephen,


  • 7.  RE: Regex for CPU alarm

    Posted 08-02-2021 11:07 AM
    I think you can get by on an even simpler regex if you'd like:

    /total cpu is now .*Top Processes \[mcshield\.exe/


  • 8.  RE: Regex for CPU alarm

    Posted 08-04-2021 05:41 AM
    Thanks Keith,

    its working fine.