1
2
# make sure we can collect web log data
3
4
-template: last_collected_secs
5
- on: web_log.response_codes
6
-families: *
7
- calc: $now - $last_collected_t
8
- units: seconds ago
9
- every: 10s
10
- warn: $this > (($status >= $WARNING) ? ($update_every) : ( 5 * $update_every))
11
- crit: $this > (($status == $CRITICAL) ? ($update_every) : (60 * $update_every))
12
- delay: down 5m multiplier 1.5 max 1h
13
- info: number of seconds since the last successful data collection
14
- to: webmaster
4
+ template: last_collected_secs
5
+ on: web_log.response_codes
6
+ class: Web Server
7
+component: Web log
8
+ type: Latency
9
+ families: *
10
+ calc: $now - $last_collected_t
11
+ units: seconds ago
12
+ every: 10s
13
+ warn: $this > (($status >= $WARNING) ? ($update_every) : ( 5 * $update_every))
14
+ crit: $this > (($status == $CRITICAL) ? ($update_every) : (60 * $update_every))
15
+ delay: down 5m multiplier 1.5 max 1h
16
+ info: number of seconds since the last successful data collection
17
+ to: webmaster
18
19
20
# -----------------------------------------------------------------------------
27
#
28
# i.e. when there are at least 120 requests during the last minute
29
27
-template: 1m_requests
28
- on: web_log.response_statuses
29
-families: *
30
- lookup: sum -1m unaligned
31
- calc: ($this == 0)?(1):($this)
32
- units: requests
33
- every: 10s
34
- info: number of HTTP requests in the last minute
35
-
36
-template: 1m_successful
37
- on: web_log.response_statuses
38
-families: *
39
- lookup: sum -1m unaligned of successful_requests
40
- calc: $this * 100 / $1m_requests
41
- units: %
42
- every: 10s
43
- warn: ($1m_requests > 120) ? ($this < (($status >= $WARNING ) ? ( 95 ) : ( 85 )) ) : ( 0 )
44
- crit: ($1m_requests > 120) ? ($this < (($status == $CRITICAL) ? ( 85 ) : ( 75 )) ) : ( 0 )
45
- delay: up 2m down 15m multiplier 1.5 max 1h
46
- info: ratio of successful HTTP requests over the last minute (1xx, 2xx, 304, 401)
47
- to: webmaster
48
-
49
-template: 1m_redirects
50
- on: web_log.response_statuses
51
-families: *
52
- lookup: sum -1m unaligned of redirects
53
- calc: $this * 100 / $1m_requests
54
- units: %
55
- every: 10s
56
- warn: ($1m_requests > 120) ? ($this > (($status >= $WARNING ) ? ( 1 ) : ( 20 )) ) : ( 0 )
57
- crit: ($1m_requests > 120) ? ($this > (($status == $CRITICAL) ? ( 20 ) : ( 30 )) ) : ( 0 )
58
- delay: up 2m down 15m multiplier 1.5 max 1h
59
- info: ratio of redirection HTTP requests over the last minute (3xx except 304)
60
- to: webmaster
61
-
62
-template: 1m_bad_requests
63
- on: web_log.response_statuses
64
-families: *
65
- lookup: sum -1m unaligned of bad_requests
66
- calc: $this * 100 / $1m_requests
67
- units: %
68
- every: 10s
69
- warn: ($1m_requests > 120) ? ($this > (($status >= $WARNING) ? ( 10 ) : ( 30 )) ) : ( 0 )
70
- crit: ($1m_requests > 120) ? ($this > (($status == $CRITICAL) ? ( 30 ) : ( 50 )) ) : ( 0 )
71
- delay: up 2m down 15m multiplier 1.5 max 1h
72
- info: ratio of client error HTTP requests over the last minute (4xx except 401)
73
- to: webmaster
74
-
75
-template: 1m_internal_errors
76
- on: web_log.response_statuses
77
-families: *
78
- lookup: sum -1m unaligned of server_errors
79
- calc: $this * 100 / $1m_requests
80
- units: %
81
- every: 10s
82
- warn: ($1m_requests > 120) ? ($this > (($status >= $WARNING) ? ( 1 ) : ( 2 )) ) : ( 0 )
83
- crit: ($1m_requests > 120) ? ($this > (($status == $CRITICAL) ? ( 2 ) : ( 5 )) ) : ( 0 )
84
- delay: up 2m down 15m multiplier 1.5 max 1h
85
- info: ratio of server error HTTP requests over the last minute (5xx)
86
- to: webmaster
30
+ template: 1m_requests
31
+ on: web_log.response_statuses
32
+ class: Web Server
33
+component: Web log
34
+ type: Workload
35
+ families: *
36
+ lookup: sum -1m unaligned
37
+ calc: ($this == 0)?(1):($this)
38
+ units: requests
39
+ every: 10s
40
+ info: number of HTTP requests in the last minute
41
+
42
+ template: 1m_successful
43
+ on: web_log.response_statuses
44
+ class: Web Server
45
+component: Web log
46
+ type: Workload
47
+ families: *
48
+ lookup: sum -1m unaligned of successful_requests
49
+ calc: $this * 100 / $1m_requests
50
+ units: %
51
+ every: 10s
52
+ warn: ($1m_requests > 120) ? ($this < (($status >= $WARNING ) ? ( 95 ) : ( 85 )) ) : ( 0 )
53
+ crit: ($1m_requests > 120) ? ($this < (($status == $CRITICAL) ? ( 85 ) : ( 75 )) ) : ( 0 )
54
+ delay: up 2m down 15m multiplier 1.5 max 1h
55
+ info: ratio of successful HTTP requests over the last minute (1xx, 2xx, 304, 401)
56
+ to: webmaster
57
+
58
+ template: 1m_redirects
59
+ on: web_log.response_statuses
60
+ class: Web Server
61
+component: Web log
62
+ type: Workload
63
+ families: *
64
+ lookup: sum -1m unaligned of redirects
65
+ calc: $this * 100 / $1m_requests
66
+ units: %
67
+ every: 10s
68
+ warn: ($1m_requests > 120) ? ($this > (($status >= $WARNING ) ? ( 1 ) : ( 20 )) ) : ( 0 )
69
+ crit: ($1m_requests > 120) ? ($this > (($status == $CRITICAL) ? ( 20 ) : ( 30 )) ) : ( 0 )
70
+ delay: up 2m down 15m multiplier 1.5 max 1h
71
+ info: ratio of redirection HTTP requests over the last minute (3xx except 304)
72
+ to: webmaster
73
+
74
+ template: 1m_bad_requests
75
+ on: web_log.response_statuses
76
+ class: Web Server
77
+component: Web log
78
+ type: Errors
79
+ families: *
80
+ lookup: sum -1m unaligned of bad_requests
81
+ calc: $this * 100 / $1m_requests
82
+ units: %
83
+ every: 10s
84
+ warn: ($1m_requests > 120) ? ($this > (($status >= $WARNING) ? ( 10 ) : ( 30 )) ) : ( 0 )
85
+ crit: ($1m_requests > 120) ? ($this > (($status == $CRITICAL) ? ( 30 ) : ( 50 )) ) : ( 0 )
86
+ delay: up 2m down 15m multiplier 1.5 max 1h
87
+ info: ratio of client error HTTP requests over the last minute (4xx except 401)
88
+ to: webmaster
89
+
90
+ template: 1m_internal_errors
91
+ on: web_log.response_statuses
92
+ class: Web Server
93
+component: Web log
94
+ type: Errors
95
+ families: *
96
+ lookup: sum -1m unaligned of server_errors
97
+ calc: $this * 100 / $1m_requests
98
+ units: %
99
+ every: 10s
100
+ warn: ($1m_requests > 120) ? ($this > (($status >= $WARNING) ? ( 1 ) : ( 2 )) ) : ( 0 )
101
+ crit: ($1m_requests > 120) ? ($this > (($status == $CRITICAL) ? ( 2 ) : ( 5 )) ) : ( 0 )
102
+ delay: up 2m down 15m multiplier 1.5 max 1h
103
+ info: ratio of server error HTTP requests over the last minute (5xx)
104
+ to: webmaster
105
106
# unmatched lines
107
112
#
113
# i.e. when there are at least 120 requests during the last minute
114
97
-template: 1m_total_requests
98
- on: web_log.response_codes
99
-families: *
100
- lookup: sum -1m unaligned
101
- calc: ($this == 0)?(1):($this)
102
- units: requests
103
- every: 10s
104
- info: number of HTTP requests over the last minute
105
-
106
-template: 1m_unmatched
107
- on: web_log.response_codes
108
-families: *
109
- lookup: sum -1m unaligned of unmatched
110
- calc: $this * 100 / $1m_total_requests
111
- units: %
112
- every: 10s
113
- warn: ($1m_total_requests > 120) ? ($this > 1) : ( 0 )
114
- delay: up 1m down 5m multiplier 1.5 max 1h
115
- info: percentage of unparsed log lines over the last minute
116
- to: webmaster
115
+ template: 1m_total_requests
116
+ on: web_log.response_codes
117
+ class: Web Server
118
+component: Web log
119
+ type: Workload
120
+ families: *
121
+ lookup: sum -1m unaligned
122
+ calc: ($this == 0)?(1):($this)
123
+ units: requests
124
+ every: 10s
125
+ info: number of HTTP requests over the last minute
126
+
127
+ template: 1m_unmatched
128
+ on: web_log.response_codes
129
+ class: Web Server
130
+component: Web log
131
+ type: Errors
132
+ families: *
133
+ lookup: sum -1m unaligned of unmatched
134
+ calc: $this * 100 / $1m_total_requests
135
+ units: %
136
+ every: 10s
137
+ warn: ($1m_total_requests > 120) ? ($this > 1) : ( 0 )
138
+ delay: up 1m down 5m multiplier 1.5 max 1h
139
+ info: percentage of unparsed log lines over the last minute
140
+ to: webmaster
141
142
# -----------------------------------------------------------------------------
143
# web slow
149
#
150
# i.e. when there are at least 120 requests during the last minute
151
128
-template: 10m_response_time
129
- on: web_log.response_time
130
-families: *
131
- lookup: average -10m unaligned of avg
132
- units: ms
133
- every: 30s
134
- info: average HTTP response time over the last 10 minutes
135
-
136
-template: web_slow
137
- on: web_log.response_time
138
-families: *
139
- lookup: average -1m unaligned of avg
140
- units: ms
141
- every: 10s
142
- green: 500
143
- red: 1000
144
- warn: ($1m_requests > 120) ? ($this > $green && $this > ($10m_response_time * 2) ) : ( 0 )
145
- crit: ($1m_requests > 120) ? ($this > $red && $this > ($10m_response_time * 4) ) : ( 0 )
146
- delay: down 15m multiplier 1.5 max 1h
147
- info: average HTTP response time over the last minute
148
- options: no-clear-notification
149
- to: webmaster
152
+ template: 10m_response_time
153
+ on: web_log.response_time
154
+ class: System
155
+component: Web log
156
+ type: Latency
157
+ families: *
158
+ lookup: average -10m unaligned of avg
159
+ units: ms
160
+ every: 30s
161
+ info: average HTTP response time over the last 10 minutes
162
+
163
+ template: web_slow
164
+ on: web_log.response_time
165
+ class: Web Server
166
+component: Web log
167
+ type: Latency
168
+ families: *
169
+ lookup: average -1m unaligned of avg
170
+ units: ms
171
+ every: 10s
172
+ green: 500
173
+ red: 1000
174
+ warn: ($1m_requests > 120) ? ($this > $green && $this > ($10m_response_time * 2) ) : ( 0 )
175
+ crit: ($1m_requests > 120) ? ($this > $red && $this > ($10m_response_time * 4) ) : ( 0 )
176
+ delay: down 15m multiplier 1.5 max 1h
177
+ info: average HTTP response time over the last minute
178
+ options: no-clear-notification
179
+ to: webmaster
180
181
# -----------------------------------------------------------------------------
182
# web too many or too few requests
189
# i.e. when there were at least 120 requests during the 5 minutes starting
190
# at -10m and ending at -5m
191
162
-template: 5m_successful_old
163
- on: web_log.response_statuses
164
-families: *
165
- lookup: average -5m at -5m unaligned of successful_requests
166
- units: requests/s
167
- every: 30s
168
- info: average number of successful HTTP requests for the 5 minutes starting 10 minutes ago
169
-
170
-template: 5m_successful
171
- on: web_log.response_statuses
172
-families: *
173
- lookup: average -5m unaligned of successful_requests
174
- units: requests/s
175
- every: 30s
176
- info: average number of successful HTTP requests over the last 5 minutes
177
-
178
-template: 5m_requests_ratio
179
- on: web_log.response_codes
180
-families: *
181
- calc: ($5m_successful_old > 0)?($5m_successful * 100 / $5m_successful_old):(100)
182
- units: %
183
- every: 30s
184
- warn: ($5m_successful_old > 120) ? ($this > 200 OR $this < 50) : (0)
185
- crit: ($5m_successful_old > 120) ? ($this > 400 OR $this < 25) : (0)
186
- delay: down 15m multiplier 1.5 max 1h
187
-options: no-clear-notification
188
- info: ratio of successful HTTP requests over the last 5 minutes, \
189
- compared with the previous 5 minutes \
190
- (clear notification for this alarm will not be sent)
191
- to: webmaster
192
+ template: 5m_successful_old
193
+ on: web_log.response_statuses
194
+ class: Web Server
195
+component: Web log
196
+ type: Workload
197
+ families: *
198
+ lookup: average -5m at -5m unaligned of successful_requests
199
+ units: requests/s
200
+ every: 30s
201
+ info: average number of successful HTTP requests for the 5 minutes starting 10 minutes ago
202
+
203
+ template: 5m_successful
204
+ on: web_log.response_statuses
205
+ class: Web Server
206
+component: Web log
207
+ type: Workload
208
+ families: *
209
+ lookup: average -5m unaligned of successful_requests
210
+ units: requests/s
211
+ every: 30s
212
+ info: average number of successful HTTP requests over the last 5 minutes
213
+
214
+ template: 5m_requests_ratio
215
+ on: web_log.response_codes
216
+ class: Web Server
217
+component: Web log
218
+ type: Workload
219
+ families: *
220
+ calc: ($5m_successful_old > 0)?($5m_successful * 100 / $5m_successful_old):(100)
221
+ units: %
222
+ every: 30s
223
+ warn: ($5m_successful_old > 120) ? ($this > 200 OR $this < 50) : (0)
224
+ crit: ($5m_successful_old > 120) ? ($this > 400 OR $this < 25) : (0)
225
+ delay: down 15m multiplier 1.5 max 1h
226
+ options: no-clear-notification
227
+ info: ratio of successful HTTP requests over the last 5 minutes, \
228
+ compared with the previous 5 minutes \
229
+ (clear notification for this alarm will not be sent)
230
+ to: webmaster
231
232
233
235
236
# make sure we can collect web log data
237
199
-template: web_log_last_collected_secs
200
- on: web_log.requests
201
-families: *
202
- calc: $now - $last_collected_t
203
- units: seconds ago
204
- every: 10s
205
- warn: $this > (($status >= $WARNING) ? ($update_every) : ( 5 * $update_every))
206
- crit: $this > (($status == $CRITICAL) ? ($update_every) : (60 * $update_every))
207
- delay: down 5m multiplier 1.5 max 1h
208
- info: number of seconds since the last successful data collection
209
- to: webmaster
238
+ template: web_log_last_collected_secs
239
+ on: web_log.requests
240
+ class: Web Server
241
+component: Web log
242
+ type: Latency
243
+ families: *
244
+ calc: $now - $last_collected_t
245
+ units: seconds ago
246
+ every: 10s
247
+ warn: $this > (($status >= $WARNING) ? ($update_every) : ( 5 * $update_every))
248
+ crit: $this > (($status == $CRITICAL) ? ($update_every) : (60 * $update_every))
249
+ delay: down 5m multiplier 1.5 max 1h
250
+ info: number of seconds since the last successful data collection
251
+ to: webmaster
252
253
# unmatched lines
254
259
#
260
# i.e. when there are at least 120 requests during the last minute
261
220
-template: web_log_1m_total_requests
221
- on: web_log.requests
222
-families: *
223
- lookup: sum -1m unaligned
224
- calc: ($this == 0)?(1):($this)
225
- units: requests
226
- every: 10s
227
- info: number of HTTP requests in the last minute
228
-
229
-template: web_log_1m_unmatched
230
- on: web_log.excluded_requests
231
-families: *
232
- lookup: sum -1m unaligned of unmatched
233
- calc: $this * 100 / $web_log_1m_total_requests
234
- units: %
235
- every: 10s
236
- warn: ($web_log_1m_total_requests > 120) ? ($this > 1) : ( 0 )
237
- delay: up 1m down 5m multiplier 1.5 max 1h
238
- info: percentage of unparsed log lines over the last minute
239
- to: webmaster
262
+ template: web_log_1m_total_requests
263
+ on: web_log.requests
264
+ class: Web Server
265
+component: Web log
266
+ type: Workload
267
+ families: *
268
+ lookup: sum -1m unaligned
269
+ calc: ($this == 0)?(1):($this)
270
+ units: requests
271
+ every: 10s
272
+ info: number of HTTP requests in the last minute
273
+
274
+ template: web_log_1m_unmatched
275
+ on: web_log.excluded_requests
276
+ class: Web Server
277
+component: Web log
278
+ type: Errors
279
+ families: *
280
+ lookup: sum -1m unaligned of unmatched
281
+ calc: $this * 100 / $web_log_1m_total_requests
282
+ units: %
283
+ every: 10s
284
+ warn: ($web_log_1m_total_requests > 120) ? ($this > 1) : ( 0 )
285
+ delay: up 1m down 5m multiplier 1.5 max 1h
286
+ info: percentage of unparsed log lines over the last minute
287
+ to: webmaster
288
289
# -----------------------------------------------------------------------------
290
# high level response code alarms
296
#
297
# i.e. when there are at least 120 requests during the last minute
298
251
-template: web_log_1m_requests
252
- on: web_log.type_requests
253
-families: *
254
- lookup: sum -1m unaligned
255
- calc: ($this == 0)?(1):($this)
256
- units: requests
257
- every: 10s
258
- info: number of HTTP requests in the last minute
259
-
260
-template: web_log_1m_successful
261
- on: web_log.type_requests
262
-families: *
263
- lookup: sum -1m unaligned of success
264
- calc: $this * 100 / $web_log_1m_requests
265
- units: %
266
- every: 10s
267
- warn: ($web_log_1m_requests > 120) ? ($this < (($status >= $WARNING ) ? ( 95 ) : ( 85 )) ) : ( 0 )
268
- crit: ($web_log_1m_requests > 120) ? ($this < (($status == $CRITICAL) ? ( 85 ) : ( 75 )) ) : ( 0 )
269
- delay: up 2m down 15m multiplier 1.5 max 1h
270
- info: ratio of successful HTTP requests over the last minute (1xx, 2xx, 304, 401)
271
- to: webmaster
272
-
273
-template: web_log_1m_redirects
274
- on: web_log.type_requests
275
-families: *
276
- lookup: sum -1m unaligned of redirect
277
- calc: $this * 100 / $web_log_1m_requests
278
- units: %
279
- every: 10s
280
- warn: ($web_log_1m_requests > 120) ? ($this > (($status >= $WARNING ) ? ( 1 ) : ( 20 )) ) : ( 0 )
281
- crit: ($web_log_1m_requests > 120) ? ($this > (($status == $CRITICAL) ? ( 20 ) : ( 30 )) ) : ( 0 )
282
- delay: up 2m down 15m multiplier 1.5 max 1h
283
- info: ratio of redirection HTTP requests over the last minute (3xx except 304)
284
- to: webmaster
285
-
286
-template: web_log_1m_bad_requests
287
- on: web_log.type_requests
288
-families: *
289
- lookup: sum -1m unaligned of bad
290
- calc: $this * 100 / $web_log_1m_requests
291
- units: %
292
- every: 10s
293
- warn: ($web_log_1m_requests > 120) ? ($this > (($status >= $WARNING) ? ( 10 ) : ( 30 )) ) : ( 0 )
294
- crit: ($web_log_1m_requests > 120) ? ($this > (($status == $CRITICAL) ? ( 30 ) : ( 50 )) ) : ( 0 )
295
- delay: up 2m down 15m multiplier 1.5 max 1h
296
- info: ratio of client error HTTP requests over the last minute (4xx except 401)
297
- to: webmaster
298
-
299
-template: web_log_1m_internal_errors
300
- on: web_log.type_requests
301
-families: *
302
- lookup: sum -1m unaligned of error
303
- calc: $this * 100 / $web_log_1m_requests
304
- units: %
305
- every: 10s
306
- warn: ($web_log_1m_requests > 120) ? ($this > (($status >= $WARNING) ? ( 1 ) : ( 2 )) ) : ( 0 )
307
- crit: ($web_log_1m_requests > 120) ? ($this > (($status == $CRITICAL) ? ( 2 ) : ( 5 )) ) : ( 0 )
308
- delay: up 2m down 15m multiplier 1.5 max 1h
309
- info: ratio of server error HTTP requests over the last minute (5xx)
310
- to: webmaster
299
+ template: web_log_1m_requests
300
+ on: web_log.type_requests
301
+ class: Web Server
302
+component: Web log
303
+ type: Workload
304
+ families: *
305
+ lookup: sum -1m unaligned
306
+ calc: ($this == 0)?(1):($this)
307
+ units: requests
308
+ every: 10s
309
+ info: number of HTTP requests in the last minute
310
+
311
+ template: web_log_1m_successful
312
+ on: web_log.type_requests
313
+ class: Web Server
314
+component: Web log
315
+ type: Workload
316
+ families: *
317
+ lookup: sum -1m unaligned of success
318
+ calc: $this * 100 / $web_log_1m_requests
319
+ units: %
320
+ every: 10s
321
+ warn: ($web_log_1m_requests > 120) ? ($this < (($status >= $WARNING ) ? ( 95 ) : ( 85 )) ) : ( 0 )
322
+ crit: ($web_log_1m_requests > 120) ? ($this < (($status == $CRITICAL) ? ( 85 ) : ( 75 )) ) : ( 0 )
323
+ delay: up 2m down 15m multiplier 1.5 max 1h
324
+ info: ratio of successful HTTP requests over the last minute (1xx, 2xx, 304, 401)
325
+ to: webmaster
326
+
327
+ template: web_log_1m_redirects
328
+ on: web_log.type_requests
329
+ class: Web Server
330
+component: Web log
331
+ type: Workload
332
+ families: *
333
+ lookup: sum -1m unaligned of redirect
334
+ calc: $this * 100 / $web_log_1m_requests
335
+ units: %
336
+ every: 10s
337
+ warn: ($web_log_1m_requests > 120) ? ($this > (($status >= $WARNING ) ? ( 1 ) : ( 20 )) ) : ( 0 )
338
+ crit: ($web_log_1m_requests > 120) ? ($this > (($status == $CRITICAL) ? ( 20 ) : ( 30 )) ) : ( 0 )
339
+ delay: up 2m down 15m multiplier 1.5 max 1h
340
+ info: ratio of redirection HTTP requests over the last minute (3xx except 304)
341
+ to: webmaster
342
+
343
+ template: web_log_1m_bad_requests
344
+ on: web_log.type_requests
345
+ class: Web Server
346
+component: Web log
347
+ type: Errors
348
+ families: *
349
+ lookup: sum -1m unaligned of bad
350
+ calc: $this * 100 / $web_log_1m_requests
351
+ units: %
352
+ every: 10s
353
+ warn: ($web_log_1m_requests > 120) ? ($this > (($status >= $WARNING) ? ( 10 ) : ( 30 )) ) : ( 0 )
354
+ crit: ($web_log_1m_requests > 120) ? ($this > (($status == $CRITICAL) ? ( 30 ) : ( 50 )) ) : ( 0 )
355
+ delay: up 2m down 15m multiplier 1.5 max 1h
356
+ info: ratio of client error HTTP requests over the last minute (4xx except 401)
357
+ to: webmaster
358
+
359
+ template: web_log_1m_internal_errors
360
+ on: web_log.type_requests
361
+ class: Web Server
362
+component: Web log
363
+ type: Errors
364
+ families: *
365
+ lookup: sum -1m unaligned of error
366
+ calc: $this * 100 / $web_log_1m_requests
367
+ units: %
368
+ every: 10s
369
+ warn: ($web_log_1m_requests > 120) ? ($this > (($status >= $WARNING) ? ( 1 ) : ( 2 )) ) : ( 0 )
370
+ crit: ($web_log_1m_requests > 120) ? ($this > (($status == $CRITICAL) ? ( 2 ) : ( 5 )) ) : ( 0 )
371
+ delay: up 2m down 15m multiplier 1.5 max 1h
372
+ info: ratio of server error HTTP requests over the last minute (5xx)
373
+ to: webmaster
374
375
# -----------------------------------------------------------------------------
376
# web slow
382
#
383
# i.e. when there are at least 120 requests during the last minute
384
322
-template: web_log_10m_response_time
323
- on: web_log.request_processing_time
324
-families: *
325
- lookup: average -10m unaligned of avg
326
- units: ms
327
- every: 30s
328
- info: average HTTP response time over the last 10 minutes
329
-
330
-template: web_log_web_slow
331
- on: web_log.request_processing_time
332
-families: *
333
- lookup: average -1m unaligned of avg
334
- units: ms
335
- every: 10s
336
- green: 500
337
- red: 1000
338
- warn: ($web_log_1m_requests > 120) ? ($this > $green && $this > ($web_log_10m_response_time * 2) ) : ( 0 )
339
- crit: ($web_log_1m_requests > 120) ? ($this > $red && $this > ($web_log_10m_response_time * 4) ) : ( 0 )
340
- delay: down 15m multiplier 1.5 max 1h
341
- info: average HTTP response time over the last 1 minute
342
- options: no-clear-notification
343
- to: webmaster
385
+ template: web_log_10m_response_time
386
+ on: web_log.request_processing_time
387
+ class: System
388
+component: Web log
389
+ type: Latency
390
+ families: *
391
+ lookup: average -10m unaligned of avg
392
+ units: ms
393
+ every: 30s
394
+ info: average HTTP response time over the last 10 minutes
395
+
396
+ template: web_log_web_slow
397
+ on: web_log.request_processing_time
398
+ class: Web Server
399
+component: Web log
400
+ type: Latency
401
+ families: *
402
+ lookup: average -1m unaligned of avg
403
+ units: ms
404
+ every: 10s
405
+ green: 500
406
+ red: 1000
407
+ warn: ($web_log_1m_requests > 120) ? ($this > $green && $this > ($web_log_10m_response_time * 2) ) : ( 0 )
408
+ crit: ($web_log_1m_requests > 120) ? ($this > $red && $this > ($web_log_10m_response_time * 4) ) : ( 0 )
409
+ delay: down 15m multiplier 1.5 max 1h
410
+ info: average HTTP response time over the last 1 minute
411
+ options: no-clear-notification
412
+ to: webmaster
413
414
# -----------------------------------------------------------------------------
415
# web too many or too few requests
422
# i.e. when there were at least 120 requests during the 5 minutes starting
423
# at -10m and ending at -5m
424
356
-template: web_log_5m_successful_old
357
- on: web_log.type_requests
358
-families: *
359
- lookup: average -5m at -5m unaligned of success
360
- units: requests/s
361
- every: 30s
362
- info: average number of successful HTTP requests for the 5 minutes starting 10 minutes ago
363
-
364
-template: web_log_5m_successful
365
- on: web_log.type_requests
366
-families: *
367
- lookup: average -5m unaligned of success
368
- units: requests/s
369
- every: 30s
370
- info: average number of successful HTTP requests over the last 5 minutes
371
-
372
-template: web_log_5m_requests_ratio
373
- on: web_log.type_requests
374
-families: *
375
- calc: ($web_log_5m_successful_old > 0)?($web_log_5m_successful * 100 / $web_log_5m_successful_old):(100)
376
- units: %
377
- every: 30s
378
- warn: ($web_log_5m_successful_old > 120) ? ($this > 200 OR $this < 50) : (0)
379
- crit: ($web_log_5m_successful_old > 120) ? ($this > 400 OR $this < 25) : (0)
380
- delay: down 15m multiplier 1.5 max 1h
381
-options: no-clear-notification
382
- info: ratio of successful HTTP requests over over the last 5 minutes, \
383
- compared with the previous 5 minutes \
384
- (clear notification for this alarm will not be sent)
385
- to: webmaster
425
+ template: web_log_5m_successful_old
426
+ on: web_log.type_requests
427
+ class: Web Server
428
+component: Web log
429
+ type: Workload
430
+ families: *
431
+ lookup: average -5m at -5m unaligned of success
432
+ units: requests/s
433
+ every: 30s
434
+ info: average number of successful HTTP requests for the 5 minutes starting 10 minutes ago
435
+
436
+ template: web_log_5m_successful
437
+ on: web_log.type_requests
438
+ class: Web Server
439
+component: Web log
440
+ type: Workload
441
+ families: *
442
+ lookup: average -5m unaligned of success
443
+ units: requests/s
444
+ every: 30s
445
+ info: average number of successful HTTP requests over the last 5 minutes
446
+
447
+ template: web_log_5m_requests_ratio
448
+ on: web_log.type_requests
449
+ class: Web Server
450
+component: Web log
451
+ type: Workload
452
+ families: *
453
+ calc: ($web_log_5m_successful_old > 0)?($web_log_5m_successful * 100 / $web_log_5m_successful_old):(100)
454
+ units: %
455
+ every: 30s
456
+ warn: ($web_log_5m_successful_old > 120) ? ($this > 200 OR $this < 50) : (0)
457
+ crit: ($web_log_5m_successful_old > 120) ? ($this > 400 OR $this < 25) : (0)
458
+ delay: down 15m multiplier 1.5 max 1h
459
+ options: no-clear-notification
460
+ info: ratio of successful HTTP requests over over the last 5 minutes, \
461
+ compared with the previous 5 minutes \
462
+ (clear notification for this alarm will not be sent)
463
+ to: webmaster