Skip to content

Commit

Permalink
Add files via upload
Browse files Browse the repository at this point in the history
  • Loading branch information
@exajobs
exajobs authored Feb 18, 2022
1 parent 873760b commit abae0d4
Show file tree
Hide file tree
Showing 17 changed files with 1,297 additions and 0 deletions.
59 changes: 59 additions & 0 deletions kapacitor/capLog.tick
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,59 @@
dbrp "sandboxav"."sandboxav"

var name = 'capLog'

var idVar = name

var message = '{{ index .Tags "host" }} - {{.Level}} - {{.Time}}'

var idTag = 'alertID'

var levelTag = 'level'

var messageField = 'message'

var durationField = 'duration'

var triggerType = 'threshold'

var details = '''<!DOCTYPE html>
<html>
<head>
<title>===== CaptureATP log status =====</title>
</head>
<body>
<h1 style="color:red;"> CaptureATP Log Status Alert </h1>
<p> /opt/sandboxav/logs/appliance.log not up-to-date. </p>
<h2>Tags</h2>
<p> host: {{ index .Tags "host" }} </p>
</body>
</html>'''

var period = 1m
var every = 1m

var crit = 1

var data = batch
|query('''
select count
from "sandboxav"."sandboxav"."filecount"
''')
.period(period)
.every(every)
.groupBy('host')
.align()
.alignGroup()

var trigger = data
|alert()
.crit(lambda: "count" < crit)
.message(message)
.details(details)
.id(idVar)
.idTag(idTag)
.levelTag(levelTag)
.messageField(messageField)
.durationField(durationField)
.stateChangesOnly()
.topic('sandboxav')
77 changes: 77 additions & 0 deletions kapacitor/capPort.tick
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,77 @@
dbrp "sandboxav"."sandboxav"

var name = 'capPort'

var idVar = name

var message = '{{ index .Tags "host" }} - {{.Level}} - {{.Time}}'

var idTag = 'alertID'

var levelTag = 'level'

var messageField = 'message'

var durationField = 'duration'

var triggerType = 'threshold'

var details = '''<!DOCTYPE html>
<html>
<head>
<title>===== CaptureATP Port Alert =====</title>
</head>
<body>
<h1 style="color:red;"> CaptureATP Port Status Alert </h1>
<p> sandboxav port(80/12351) down. </p>
<h2>Tags</h2>
<p> host: {{ index .Tags "host" }} </p>
<h2>Fields</h2>
<p> 80: {{ index .Fields "http.p80" }}
<p> 12351: {{ index .Fields "net.p12351" }}
</body>
</html>'''

var period = 1m
var every = 1m

var crit = 0

var http = batch
|query('''
select result_code as p80
from "sandboxav"."sandboxav"."http_response"
''')
.period(period)
.every(every)
.groupBy('host')
.align()
.alignGroup()

var net = batch
|query('''
select result_code as p12351
from "sandboxav"."sandboxav"."net_response"
''')
.period(period)
.every(every)
.groupBy('host')
.align()
.alignGroup()

var data = http
|join(net)
.as('http', 'net')

var trigger = data
|alert()
.crit(lambda: "http.p80" == crit OR "net.p12351" == crit)
.message(message)
.details(details)
.id(idVar)
.idTag(idTag)
.levelTag(levelTag)
.messageField(messageField)
.durationField(durationField)
.stateChangesOnly()
.topic('sandboxav')
63 changes: 63 additions & 0 deletions kapacitor/capProcess.tick
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,63 @@
dbrp "sandboxav"."sandboxav"

var name = 'capProcess'

var idVar = name

var message = '{{ index .Tags "host" }} - {{.Level}} - {{.Time}}'

var idTag = 'alertID'

var levelTag = 'level'

var messageField = 'message'

var durationField = 'duration'

var triggerType = 'threshold'

var details = '''<!DOCTYPE html>
<html>
<head>
<title>===== CaptureATP Process Alert =====</title>
</head>
<body>
<h1 style="color:red;"> CaptureATP Process Status Alert </h1>
<p> sandboxav daemon down. </p>
<h2>Tags</h2>
<p> host: {{ index .Tags "host" }} </p>
<p> process: {{ index .Tags "keyword" }} </p>
<h2>Fields</h2>
<p> process number: {{ index .Fields "number" }} </p>
</body>
</html>'''

var period = 1m
var every = 1m

var crit = 1

var data = batch
|query('''
select number
from "sandboxav"."sandboxav"."maf_process"
where keyword = 'sandboxmain.py'
''')
.period(period)
.every(every)
.groupBy('host', 'keyword')
.align()
.alignGroup()

var trigger = data
|alert()
.crit(lambda: "number" < crit)
.message(message)
.details(details)
.id(idVar)
.idTag(idTag)
.levelTag(levelTag)
.messageField(messageField)
.durationField(durationField)
.stateChangesOnly()
.topic('sandboxav')
74 changes: 74 additions & 0 deletions kapacitor/cpu.tick
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,74 @@
dbrp "sandboxav"."sandboxav"

var name = 'cpu'

var idVar = name

var message = '{{ index .Tags "host" }} - {{.Level}} - {{.Time}}'

var idTag = 'alertID'

var levelTag = 'level'

var messageField = 'message'

var durationField = 'duration'

var triggerType = 'threshold'

var details = '''<!DOCTYPE html>
<html>
<head>
<title>===== Cpu Alert =====</title>
</head>
<body>
<h1 style="color:red;"> CPU Usage Alert </h1>
<p> CPU usage alert. </p>
<h2>Tags</h2>
<p> host: {{ index .Tags "host" }} </p>
<h2>Fields</h2>
<p> cpu usage: {{ index .Fields "total" }}% </p>
</body>
</html>'''

var period = 5m
var every = 5m

var warn = 90
var crit = 95

var infoSig = 2.5
var warnSig = 3
var critSig = 3.5

var data = batch
|query('''
select 100 - mean(usage_idle) as total
from "sandboxav"."sandboxav"."cpu"
where cpu = 'cpu-total'
''')
.period(period)
.every(every)
.groupBy('host', time(1m))
.align()
.alignGroup()

var alert = data
|eval(lambda: sigma("total"))
.as('sigma')
.keep()

var trigger = alert
|alert()
.warn(lambda: "total" > warn)
.crit(lambda: "total" > crit)
.message(message)
.details(details)
.id(idVar)
.idTag(idTag)
.levelTag(levelTag)
.messageField(messageField)
.durationField(durationField)
.stateChangesOnly()
.all()
.topic('system')
Loading

0 comments on commit abae0d4

Please sign in to comment.