SampleNotifications/aria-operations-logs-alerts-datacenter-vcf.json
|
[ { "name": "*** CRITICAL *** ESXi: Core dump detected (!!datacenterName!!)", "info":"<span>A core dump has been detected, which indicates the failure of a component in ESXi. This issue may lead to VM crashes and/or host PSODs.</span><br><br>For more information, see: <span><a href=\"http://kb.vmware.com/kb/2045105\">Trending Issues: Fault/Crash problems with ESXi</a></span>", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":3600000, "searchInterval":600000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1565993612291,\"endTimeMillis\":1565997212290,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"text\",\"operator\":\"DOES_NOT_CONTAIN\",\"value\":\"hostd: --> eventtypeid\"},{\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxa4tpmjwgk3i0\",\"operator\":\"CONTAINS\",\"value\":\"dump*\"},{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"hostd*,vpxa,vobd,vmkernel,vmkwarning,sfcb-cimxml-processor,imageconfigmanager,rhttpproxy,vcenter-server\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_esxi_problem\",\"preContext\":\"esx\\\\.problem\\\\.\",\"postContext\":\"\",\"regexValue\":\"\\\\w+(\\\\.\\\\w+)*\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxa4tpmjwgk3i0\",\"constraints\":\"{\\\"filters\\\":[{\\\"internalName\\\":\\\"appname\\\",\\\"displayName\\\":\\\"appname\\\",\\\"operator\\\":\\\"CONTAINS\\\",\\\"value\\\":\\\"vcenter-server,vobd,hostd,vmkwarning,vmkernel\\\",\\\"fieldType\\\":\\\"NUMBER\\\",\\\"isExtracted\\\":false,\\\"hidden\\\":false}]}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"*** CRITICAL *** Hardware: Physical event detected (!!datacenterName!!)", "info":"<span>The purpose of this widget is to notify when the following physical hardware events have been detected, which indicates a hardware problem. Under most normal conditions, this widget should return no results. The following types of hardware events are returned<br><br>• Advanced Programmable Interrupt Controller (APIC)<br>• Machine Check Exception (MCE)<br></span><span>• Non-Maskable Interrupt (NMI)</span><span> </span><br><br><span>In the case of a \"Memory Controller Read Error\" MCE, run memtest on the impacted hosts and replace any bad DIMMs.</span><br><br><span>For more information, see:<br><br><span>• <a href=\"http://kb.vmware.com/kb/1030265\">vHBAs and other PCI devices may stop responding in ESXi 6.0.x, ESXi 5.x and ESXi/ESX 4.1 when using Interrupt Remapping</a><br></span>• <a href=\"http://kb.vmware.com/kb/1804\">Identifying and addressing Non-Maskable Interrupt events on an ESXi host</a><br>• <a href=\"http://kb.vmware.com/kb/1005184\">Decoding Machine Check Exception (MCE) output after a purple screen error</a><br></span>", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":86400000, "searchInterval":3600000, "ChartQuery": "{\"query\":\"\",\"startTimeMillis\":1567101913277,\"endTimeMillis\":1567188313276,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"hostd, vpxa, vobd, vmkernel, vmkwarning, sfcb-cimxml-processor, imageconfigmanager\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"machine check, mce, mc, nmi, apic\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"alert,error,exception,not recoverable,unable to continue\"},{\"internalName\":\"text\",\"operator\":\"DOES_NOT_CONTAIN\",\"value\":\"error ip, recoverable error, fixed, recovery\"},{\"internalName\":\"hostname\",\"operator\":\"DOES_NOT_CONTAIN\",\"value\":\"mce, mc, nmi, apic\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"Hardware: Faulty memory detected (!!datacenterName!!)", "info":"During the previous boot of an ESXi host faulty memory was detected. Unless a corresponding corrected message is seen, the memory should be replaced. <br><br>For more information, please see: <br><br>• <a href=\"http://kb.vmware.com/kb/2008842\">Fatal memory detected on previous boot</a><br>• <a href=\"http://kb.vmware.com/kb/2008840\">Recoverable memory error detected on previous boot</a><br>", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":86400000, "searchInterval":3600000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1567106335723,\"endTimeMillis\":1567192735722,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"esx\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"problem.apei.bert.memory.error\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"*** CRITICAL *** ESXi: Stopped logging (!!datacenterName!!)", "info":"The purpose of this alert is to notify when an ESXi host has stopped sending syslog to a remote server. If you want to detect whether an ESXi host has stopped sending syslog to your Log Insight instance, you can further add a filter for 'vc_remote_host equals'.<br><br>Certain versions of ESXi 5.0 and 5.1 will no longer forward remote syslog once a remote destination becomes unavailable. To address this issue the syslog process on the impacted ESXi hosts needs to be restarted. If you are using <a href=\"/admin/vsphere\">vSphere integration</a><span> in Log Insight then this can be achieved by selecting View Details for each configured vCenter Server instance, selecting the top checkbox to select all hosts, and selecting the Configure button. Note, this will restart the syslog agent on all ESXi hosts, but this operation has no impact except on hosts that experience the remote syslog issue.<br><br>The impacted ESXi versions are:<br><br>• UDP - ESXi 5.0, 5.0 Update 1 (fixed in <a href=\"http://kb.vmware.com/kb/2065691\">ESXi 5.0 Update 7</a>)<br>• TCP - ESXi 5.0, 5.0 Update 1, 5.0 Update 2, 5.1, 5.1 Update 1 (fixed in <a href=\"http://kb.vmware.com/kb/2065691\">ESXi 5.0 Update 7</a> and <a href=\"https://www.vmware.com/support/vsphere5/doc/vsphere-esxi-51u2-release-notes.html\">ESXi 5.1 Update 2</a>)<br><br>For more information, please see: <a href=\"http://kb.vmware.com/kb/2003127\">VMware ESXi 5.x host stops sending syslogs to remote server</a>.<br></span>", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":900000, "searchInterval":300000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1567191964081,\"endTimeMillis\":1567192864080,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxa4tpmjwgk3i0\",\"operator\":\"CONTAINS\",\"value\":\"vmsyslogd.remote.failure\"},{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"hostd*,vpxa,vobd,vmkernel,vmkwarning,sfcb-cimxml-processor,imageconfigmanager,rhttpproxy,vcenter-server\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_esxi_problem\",\"preContext\":\"esx\\\\.problem\\\\.\",\"postContext\":\"\",\"regexValue\":\"\\\\w+(\\\\.\\\\w+)*\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxa4tpmjwgk3i0\",\"constraints\":\"{\\\"filters\\\":[{\\\"internalName\\\":\\\"appname\\\",\\\"displayName\\\":\\\"appname\\\",\\\"operator\\\":\\\"CONTAINS\\\",\\\"value\\\":\\\"vcenter-server,vobd,hostd,vmkwarning,vmkernel\\\",\\\"fieldType\\\":\\\"NUMBER\\\",\\\"isExtracted\\\":false,\\\"hidden\\\":false}]}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"*** CRITICAL *** ESXi: RAM disk / inode table is full (!!datacenterName!!)", "info":"<span>A root file system has reached its resource pool limit. Various administrative actions depend on the ability to write files to various parts of the root file system and might fail if the RAM disk and/or inode table is full. <br><br>For more information, please see:<br><br><span>•</span><span> </span><a href=\"http://kb.vmware.com/kb/2033073\">The ramdisk 'root' is full</a><br>• </span><a href=\"http://kb.vmware.com/kb/2001550\">RAM disk is full</a><br><span>•</span><span> </span><span><a href=\"http://kb.vmware.com/kb/2040707\">VMware ESXi 5.x host becomes unresponsive when attempting a vMotion migration or a configuration change</a><br>• </span><span><a href=\"http://kb.vmware.com/kb/2037798\">ESXi 5.x host is disconnected from vCenter Server due to sfcbd exhausting inodes</a><br>• <a href=\"http://kb.vmware.com/kb/2031839\">Many current.png.xxxx on the /tmp on ESXi host causes hostd to crash and disconnect</a></span><br>", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":3600000, "searchInterval":600000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1567189343813,\"endTimeMillis\":1567192943812,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"ramdisk,inode table,vfat.filesystem.full\"},{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"hostd*,vpxa,vobd,vmkernel,vmkwarning,sfcb-cimxml-processor,imageconfigmanager,rhttpproxy,vcenter-server\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"full\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"ESXi: HA isolated events by hostname (!!datacenterName!!)", "info":"During a health check, HA determined that a host was isolated. Depending on how HA is configured this may mean that VMs have been failed over from the isolated host.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":900000, "searchInterval":300000, "chartQuery": "{\"query\":\"isolate?=true\",\"startTimeMillis\":1567192111713,\"endTimeMillis\":1567193011712,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwqyk7mnxw24dpnzsw45a0\",\"operator\":\"CONTAINS\",\"value\":\"clustermanagerimpl\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_ha_component\",\"preContext\":\"(Fdm: \\\\[.*?\\\\] (\\\\[)?)|(Fdm: .*\\\\[)\",\"postContext\":\"::\\\\w+\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwqyk7mnxw24dpnzsw45a0\",\"constraints\":\"{\\\"filters\\\":[{\\\"internalName\\\":\\\"appname\\\",\\\"displayName\\\":\\\"appname\\\",\\\"operator\\\":\\\"CONTAINS\\\",\\\"value\\\":\\\"fdm\\\",\\\"fieldType\\\":\\\"NUMBER\\\",\\\"isExtracted\\\":false,\\\"hidden\\\":false}]}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"vCenter Server: HA connection failure detected (!!datacenterName!!)", "info":"A HA cluster has detected one or more unresponsive ESXi hosts. If the host(s) are marked as dead then VMs running on those hosts will be migrated to other systems. ", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":900000, "searchInterval":300000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1567192173477,\"endTimeMillis\":1567193073476,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Unique count\",\"value\":\"UCOUNT\",\"requiresField\":true,\"numericOnly\":false}],\"field\":{\"internalName\":\"hostname\",\"displayName\":\"hostname\",\"displayNamespace\":null}}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Unique count\",\"value\":\"UCOUNT\",\"requiresField\":true,\"numericOnly\":false},\"piqlFunctionField\":\"hostname\",\"fieldConstraints\":[{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"error\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"ClusterSlave::LiveCheck\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"Network: ESXi physical NIC down (!!datacenterName!!)", "info":"ESXi has reported that a physical NIC has become unavailable. Assuming other NICs are still online this indicates a lack of redundancy and a potential performance impact. If all physical NICs for a vSwitch/dvSwitch are unavailable then communication problems to VMs and/or the ESXi host may be possible.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":900000, "searchInterval":300000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1567192290736,\"endTimeMillis\":1567193190735,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxm3lonfrq0000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pxm33cl5rw63lqn5xgk3tu\",\"operator\":\"CONTAINS\",\"value\":\"netcorrelator\"},{\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxa4tpmjwgk3i0\",\"operator\":\"CONTAINS\",\"value\":\"net.redundancy.lost,net.vmnic.linkstate.down\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"Physical NIC\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"is down\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_esxi_vmnic\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxm3lonfrq0000\",\"displayNamespace\":\"VMware - vSphere\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_esxi_problem\",\"preContext\":\"esx\\\\.problem\\\\.\",\"postContext\":\"\",\"regexValue\":\"\\\\w+(\\\\.\\\\w+)*\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxa4tpmjwgk3i0\",\"constraints\":\"{\\\"filters\\\":[{\\\"internalName\\\":\\\"appname\\\",\\\"displayName\\\":\\\"appname\\\",\\\"operator\\\":\\\"CONTAINS\\\",\\\"value\\\":\\\"vcenter-server,vobd,hostd,vmkwarning,vmkernel\\\",\\\"fieldType\\\":\\\"NUMBER\\\",\\\"isExtracted\\\":false,\\\"hidden\\\":false}]}\"},{\"displayName\":\"vmw_esxi_vmnic\",\"preContext\":\"\",\"postContext\":\"\",\"regexValue\":\"vmnic[0-9]+\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxm3lonfrq0000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"vmnic*\\\"}\"},{\"displayName\":\"vmw_vob_component\",\"preContext\":\"vobd: \\\\[\",\"postContext\":\"\\\\] [0-9]+us:\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pxm33cl5rw63lqn5xgk3tu\",\"constraints\":\"{\\\"filters\\\":[{\\\"internalName\\\":\\\"appname\\\",\\\"displayName\\\":\\\"appname\\\",\\\"operator\\\":\\\"CONTAINS\\\",\\\"value\\\":\\\"vobd\\\",\\\"fieldType\\\":\\\"NUMBER\\\",\\\"isExtracted\\\":false,\\\"hidden\\\":false}]}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"Network: ESXi uplink redundancy lost (!!datacenterName!!)", "info":"<span>Only one physical NIC is currently connected, one more failure will result in a loss of connectivity. </span><br><br><span>For more information, please see: </span><a href=\"http://kb.vmware.com/kb/1009542\">Physical Link Down with Loss of Redundancy</a><br>", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":3600000, "searchInterval":600000, "chartQuery": "{\"query\":\"lost redundancy uplink\",\"startTimeMillis\":1567189677912,\"endTimeMillis\":1567193277911,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxm3lonfrq0000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxm43xnf2gg2a0\",\"operator\":\"EXISTS\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_esxi_vmnic\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxm3lonfrq0000\",\"displayNamespace\":\"VMware - vSphere\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_esxi_vswitch\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxm43xnf2gg2a0\",\"displayNamespace\":\"VMware - vSphere\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_esxi_vmnic\",\"preContext\":\"\",\"postContext\":\"\",\"regexValue\":\"vmnic[0-9]+\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxm3lonfrq0000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"vmnic*\\\"}\"},{\"displayName\":\"vmw_esxi_vswitch\",\"preContext\":\"virtual switch \\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxm43xnf2gg2a0\",\"constraints\":null}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"Network: Out of memory (!!datacenterName!!)", "info":"<span><span>If the result is dvport related, see</span><span>: </span><span><a href=\"http://kb.vmware.com/kb/2034073\">Error message is displayed when a large number of dvPorts are in use in VMware ESXi 5.1.x</a></span><br><br><span>Otherwise, </span>ESXi 5.0 or later hosts with NetQueue enabled, run out of memory when using jumbo frames (MTU is 9000 bytes). </span><span>The lack of memory for network packets leads to lost virtual machine connectivity and may also lose connection with the vCenter Server. Other symptoms include:<br><br></span><span><span>•</span><span> </span>Network performance of network card is substantially degraded.<br></span><span><span>•</span><span> </span>NFS datastores mounted and accessed through this card become unmounted or flap between connected and disconnected state.</span><span>vMotions time out.<br></span><span><span>•</span><span> </span>Restarting host management agents fail to complete when they attempt to re-initialize.<br><br><span>To resolve the out-of-memory issue, increase the size of the network packet buffer pool.</span><br></span><br>For more information, see:<br><br><span>•</span><span> </span><span><a href=\"http://kb.vmware.com/kb/2042874\">Out of memory with enabled NetQueue when using jumbo frames on ESXi 5.1 and later</a><br><span><span>•</span><span> </span><a href=\"http://kb.vmware.com/kb/2042587\">Out of heap memory in ESXi 5.0 with NetQueue and Jumbo Frames enabled</a></span></span>", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":86400000, "searchInterval":3600000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1567106939006,\"endTimeMillis\":1567193339005,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"dvport, bytes for dynamic heap\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"out of memory\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"*** CRITICAL *** Storage: All Paths Down (APD) (!!datacenterName!!)", "info":"One or more datastores has experienced an All Paths Down (APD) outage situation. This indicates that one or more datastores is or was unavailable. As a result of this issue, VMs are or were unavailable and ESXi hosts may have been disconnected from vCenter Server. This issue requires immediate attention.<br><br>The underlying query groups information by hostname and filesystem to make it clear what hosts and datastores are or were impacted. A query can be done for the filesystem (vmw_esxi_vobd_filesystem_id) to determine which VMs are or were impacted by this outage situation.<br><br>For more information, please see: <a href=\"http://kb.vmware.com/kb/2004684\">Permanent Device Loss (PDL) and All-Paths-Down (APD) in vSphere 5.x and 6.x</a><br>", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":900000, "searchInterval":300000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1567194411094,\"endTimeMillis\":1567195311093,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Unique count\",\"value\":\"UCOUNT\",\"requiresField\":true,\"numericOnly\":false}],\"field\":{\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxm33cmrpwm2lmmvzxs43umvwv62le\",\"displayName\":\"vmw_esxi_vobd_filesystem_id\",\"displayNamespace\":\"VMware - vSphere\"}}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Unique count\",\"value\":\"UCOUNT\",\"requiresField\":true,\"numericOnly\":false},\"piqlFunctionField\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxm33cmrpwm2lmmvzxs43umvwv62le\",\"fieldConstraints\":[{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"esx.problem.storage.apd.start, esx.problem.storage.apd.timeout\"},{\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pxm33cl5rw63lqn5xgk3tu\",\"operator\":\"CONTAINS\",\"value\":\"apdcorrelator\"},{\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxm33cmrpwm2lmmvzxs43umvwv62le\",\"operator\":\"EXISTS\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_esxi_vobd_filesystem_id\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxm33cmrpwm2lmmvzxs43umvwv62le\",\"displayNamespace\":\"VMware - vSphere\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_esxi_vobd_filesystem_id\",\"preContext\":\"Device or filesystem with identifier \\\\[\",\"postContext\":\"\\\\] \",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pwk43ynfpxm33cmrpwm2lmmvzxs43umvwv62le\",\"constraints\":\"{\\\"searchTerms\\\":\\\"vobd\\\"}\"},{\"displayName\":\"vmw_vob_component\",\"preContext\":\"vobd: \\\\[\",\"postContext\":\"\\\\] [0-9]+us:\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pxm33cl5rw63lqn5xgk3tu\",\"constraints\":\"{\\\"filters\\\":[{\\\"internalName\\\":\\\"appname\\\",\\\"displayName\\\":\\\"appname\\\",\\\"operator\\\":\\\"CONTAINS\\\",\\\"value\\\":\\\"vobd\\\",\\\"fieldType\\\":\\\"NUMBER\\\",\\\"isExtracted\\\":false,\\\"hidden\\\":false}]}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"*** CRITICAL *** Storage: VSAN device offline (!!datacenterName!!)", "info":"<span>A Virtual SAN storage device that backs up the datastores might fail.<br>This occurs due to a faulty device firmware, physical media, or storage controller or when certain storage devices are not readable or writeable.<br></span><br><span>Typically, such failures are irreversible. In some instances, permanent data loss might also occur, especially when data is not replicated on other nodes before failure. Virtual SAN automatically recovers data when new devices are added to the storage cluster, unless data lost is permanent.<br></span><br><span>To avoid permanent loss of data due to device failures, you must set the </span><b>Number of failures to tolerate</b><span> policy to greater than zero. For information about setting vSphere admission control policies, see </span><a href=\"http://pubs.vmware.com/vsphere-55/index.jsp?topic=%2Fcom.vmware.vsphere.storage.doc%2FGUID-C8E919D0-9D80-4AE1-826B-D180632775F3.html\">Virtual SAN and Storage Policy-Based Management</a><span>. Ensure that you have provisioned the hosts with enough disk space to accommodate any additional requirement for replication.<br></span><br>For more information, see: <span><a href=\"http://kb.vmware.com/kb/2071075\">Virtual SAN device encounters a permanent error when devices are not readable or writeable</a></span>", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":900000, "searchInterval":300000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1567194485669,\"endTimeMillis\":1567195385668,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"esx.problem.vob.vsan.lsom.diskerror,esx.clear.vob.vsan.pdl.offline\"},{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"hostd*,vpxa,vobd,vmkernel,vmkwarning,sfcb-cimxml-processor,imageconfigmanager,rhttpproxy,vcenter-server\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"Storage: NFS connectivity issue (!!datacenterName!!)", "info":"The purpose of this alert is to notify when an NFS connectivity issue was detected. This means an NFS datastore is or was unavailable. Due to this issue, one or more VMs may be unavailable.<br><br>For more information, please see:<br><br>• <a href=\"http://kb.vmware.com/kb/1009568\">Understanding the messages: Connectivity to NFS Server Lost and Connectivity to NFS Server Restored</a><br>• <a href=\"http://kb.vmware.com/kb/1009566\">Connectivity to the NFS server is lost</a><br>• <a href=\"http://kb.vmware.com/kb/1009568\">Connectivity to NFS Server Lost and Connectivity to NFS Server Restored</a><br>• <a href=\"http://kb.vmware.com/kb/2016122\">NFS connectivity issues on NetApp NFS filers on ESXi 5.x</a><br>", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":300000, "searchInterval":60000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1567195155827,\"endTimeMillis\":1567195455826,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"vpxa, vobd, vmkernel, vmkwarning\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"esx.problem.vmfs.nfs.server.disconnect,Lost connection to the server\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"Storage: NFS lock file issue (!!datacenterName!!)", "info":"The purpose of this alert is to notify when an NFS lock file issue has been detected. Stale NFS lock files can prevent VMs from powering on. <br><br>For more information, please see: <a href=\"http://kb.vmware.com/kb/2037507\">Cannot power on a virtual machine located in an NFS datastore</a><br>", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":3600000, "searchInterval":600000, "chartQuery": "{\"query\":\"nfslock failed\",\"startTimeMillis\":1567191915987,\"endTimeMillis\":1567195515986,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"vpxa, vobd, vmkernel, vmkwarning\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"},{\"internalName\":\"text\",\"operator\":\"DOES_NOT_CONTAIN\",\"value\":\"failed to get lock on file slotsfile\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"Storage: SCSI path dead (!!datacenterName!!)", "info":"The purpose of this alert is to notify when a SCSI path has become unavailable. Assuming multiple paths are in use and the other paths are online this means reduced redundancy and performance. If all paths to a storage device become unavailable then VMs running on the storage device will become unavailable.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":300000, "searchInterval":60000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1567195272180,\"endTimeMillis\":1567195572179,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"vobd\"},{\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pxm33cl5rw63lqn5xgk3tu\",\"operator\":\"CONTAINS\",\"value\":\"scsicorrelator\"},{\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pxgy3tnfpxaylunbpxg5dborsq0000\",\"operator\":\"CONTAINS\",\"value\":\"dead\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_scsi_path_state\",\"preContext\":\"\\\\[vob\\\\.scsi\\\\.scsipath\\\\.pathstate\\\\.\",\"postContext\":\"\\\\]\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pxgy3tnfpxaylunbpxg5dborsq0000\",\"constraints\":\"{\\\"filters\\\":[{\\\"internalName\\\":\\\"appname\\\",\\\"displayName\\\":\\\"appname\\\",\\\"operator\\\":\\\"CONTAINS\\\",\\\"value\\\":\\\"vobd\\\",\\\"fieldType\\\":\\\"NUMBER\\\",\\\"isExtracted\\\":false,\\\"hidden\\\":false}]}\"},{\"displayName\":\"vmw_vob_component\",\"preContext\":\"vobd: \\\\[\",\"postContext\":\"\\\\] [0-9]+us:\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcoc7mnxw2ltwnv3wc4tffz3hg4dimvzgk5tno5pxm33cl5rw63lqn5xgk3tu\",\"constraints\":\"{\\\"filters\\\":[{\\\"internalName\\\":\\\"appname\\\",\\\"displayName\\\":\\\"appname\\\",\\\"operator\\\":\\\"CONTAINS\\\",\\\"value\\\":\\\"vobd\\\",\\\"fieldType\\\":\\\"NUMBER\\\",\\\"isExtracted\\\":false,\\\"hidden\\\":false}]}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"Storage: Snapshot consolidation required (!!datacenterName!!)", "info":"The purpose of this alert is to notify when a snapshot consolidation is required. A failed snapshot consolidation operation that is not manually addressed can lead to a full datastore. For more information, please see: <a href=\"http://kb.vmware.com/kb/2003638\">Consolidating snapshots in vSphere 5.x</a>", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":21600000, "searchInterval":3600000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1567174024701,\"endTimeMillis\":1567195624700,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"hostd\"},{\"internalName\":\"text\",\"operator\":\"DOES_NOT_CONTAIN\",\"value\":\"\\\"needConsolidate is false\\\"\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"snapshot needconsolidate\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"vSAN - SSD health change to unhealthy state (!!datacenterName!!)", "info":"This alert will fire when the state of any SSD changes to unhealthy. The reason could be either because of permanent disk failure, disk decommissioning, node shutdown, etc. ", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":300000, "searchInterval":60000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1567195784806,\"endTimeMillis\":1567196084805,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"DOMTraceLeafSSDHealthChangeCb\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffz3hgyloozwxox3wonqw4x3tonsf62dfmfwhi2c7mzwgcz3t\",\"operator\":\"NOT_EQUAL\",\"value\":\"0x0\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffz3hgyloozwxox3wonqw4x3tonsf65lvnfsf62dfmfwhi2c7mnugc3thmu000000\",\"operator\":\"EXISTS\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_vsan_ssd_uuid_health_change\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffz3hgyloozwxox3wonqw4x3tonsf65lvnfsf62dfmfwhi2c7mnugc3thmu000000\",\"displayNamespace\":\"VMware - VSAN\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_vsan_ssd_health_flags\",\"preContext\":\"healthFlags': \",\"postContext\":\"\\\\}\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffz3hgyloozwxox3wonqw4x3tonsf62dfmfwhi2c7mzwgcz3t\",\"constraints\":\"{\\\"searchTerms\\\":\\\"ssdUUID\\\"}\"},{\"displayName\":\"vmw_vsan_ssd_uuid_health_change\",\"preContext\":\"ssdUUID': '\",\"postContext\":\"'\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffz3hgyloozwxox3wonqw4x3tonsf65lvnfsf62dfmfwhi2c7mnugc3thmu000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"healthFlags\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"vSAN - Configuration failure - Insufficient space (!!datacenterName!!)", "info":"<span>This alert indicates that we cannot create a configuration for a new object(VM) in the vSAN cluster because sufficient space is not available in the cluster. If we see this error, please check the error logs and try the provisioning operation after adding new hosts/disks.</span><br>", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":300000, "searchInterval":60000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1567195840224,\"endTimeMillis\":1567196140223,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"Not enough space available. Available:\"},{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"clomd\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"*** CRITICAL *** Storage: VSAN device offline (!!datacenterName!!)", "info":"<span>A Virtual SAN storage device that backs up the datastores might fail.<br>This occurs due to a faulty device firmware, physical media, or storage controller or when certain storage devices are not readable or writeable.<br></span><br><span>Typically, such failures are irreversible. In some instances, permanent data loss might also occur, especially when data is not replicated on other nodes before failure. Virtual SAN automatically recovers data when new devices are added to the storage cluster, unless data lost is permanent.<br></span><br><span>To avoid permanent loss of data due to device failures, you must set the </span><b>Number of failures to tolerate</b><span> policy to greater than zero. For information about setting vSphere admission control policies, see </span><a href=\"http://pubs.vmware.com/vsphere-55/index.jsp?topic=%2Fcom.vmware.vsphere.storage.doc%2FGUID-C8E919D0-9D80-4AE1-826B-D180632775F3.html\">Virtual SAN and Storage Policy-Based Management</a><span>. Ensure that you have provisioned the hosts with enough disk space to accommodate any additional requirement for replication.<br></span><br>For more information, see: <span><a href=\"http://kb.vmware.com/kb/2071075\">Virtual SAN device encounters a permanent error when devices are not readable or writeable</a></span>", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":300000, "searchInterval":60000, "chartQuery": "{\"query\":\"has gone offline\",\"startTimeMillis\":1567195898924,\"endTimeMillis\":1567196198923,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"has gone offline\"},{\"internalName\":\"text\",\"operator\":\"MATCH\",\"value\":\"(v|Virtual )SAN device\"},{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"vmkernel\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffz3hgyloozwxox3wonqw4x3pmztgy2lomvpwi2ltnnpxk5ljmq000000\",\"operator\":\"EXISTS\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_vsan_offline_disk_uuid\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffz3hgyloozwxox3wonqw4x3pmztgy2lomvpwi2ltnnpxk5ljmq000000\",\"displayNamespace\":\"VMware - VSAN\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_vsan_offline_disk_uuid\",\"preContext\":\"(v|Virtual )SAN device \",\"postContext\":\" has gone offline\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffz3hgyloozwxox3wonqw4x3pmztgy2lomvpwi2ltnnpxk5ljmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"LSOM\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"vSAN - Object component state changed to degraded (!!datacenterName!!)", "info":"This alert will be triggered when <span>vSAN object state changes to degraded state.</span><span>Check the state of the adapters, disks and network settings associated with the vSAN cluster.</span><br><br>", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType": "RATE_BASED", "hitOperator": "GREATER_THAN", "hitCount": 0, "searchPeriod":300000, "searchInterval":60000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1567195960958,\"endTimeMillis\":1567196260957,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"DOMTraceLeafObjectStateChange\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"newCompState,newLeafObjState\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffz3hgyloozwxox3wonqw4x3en5wv63tfo5pwg33nobxw4zloorpxg5dborsq0000\",\"operator\":\"CONTAINS\",\"value\":\"degraded\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_vsan_dom_new_component_state\",\"preContext\":\"newCompState': '\",\"postContext\":\"'\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffz3hgyloozwxox3wonqw4x3en5wv63tfo5pwg33nobxw4zloorpxg5dborsq0000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"LEAF\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"NSX-T - SysCpuUsage (!!datacenterName!!)", "info":"CPU usage is above 95% for more than 10 minutes.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":2.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1641908646169,\"endTimeMillis\":1641908946169,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXPlatformSysCpuUsage\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^9[5-9]|100$\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"NSX-T - SysMemUsage (!!datacenterName!!)", "info":"Memory usage is above 95% for more than 10 minutes.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":2.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery": "{\"query\":\"\",\"startTimeMillis\":1641909320086,\"endTimeMillis\":1641909620086,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXPlatformSysMemUsage\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^9[5-9]|100$\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"NSX-T - SysDiskUsage (!!datacenterName!!)", "info":"Disk usage for one or more partitions is above 89% for more than 10 minutes.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":2.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXPlatformSysTmpDiskUsage,vmwNSXPlatformSysRootDiskUsage,vmwNSXPlatformSysDiskUsage,vmwNSXPlatformSysImageDiskUsage,vmwNSXPlatformSysConfigDiskUsage,vmwNSXPlatformSysRepositoryDiskUsage,vmwNSXPlatformSysVarDumpDiskUsage\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^9[0-9]|100$\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" },{ "name":"NSX-T - PasswordExpiry (!!datacenterName!!)", "info":"Password for appliance user account is about to expire or expired.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXPlatformPasswordExpiryStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^[12]?[0-9]|-\\\\d+$\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - CertificateExpiry (!!datacenterName!!)", "info":"One or more CA signed certificate is expired.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXPlatformCertificateExpiryStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^[12]?[0-9]|-\\\\d+$\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - ClusterNodeStatus (!!datacenterName!!)", "info":"Local edge cluster node is down.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXClusterNodeStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^[3-9]|\\\\d{2,}$\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - BackupFailure (!!datacenterName!!)", "info":"NSX scheduled backup operation failed.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"Cluster backup failed\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"operator\":\"CONTAINS\",\"value\":\"backup-restore\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_s2comp\",\"preContext\":\"s2comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - VipLeadership (!!datacenterName!!)", "info":"NSX Management cluster VIP is down.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"http\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MP60401\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - ApiRateLimit (!!datacenterName!!)", "info":"Client API reached 80% of the configured threshold.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"http\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"New maximum of client API rate has exceeded 80% of the allowed limit.\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - CorfuQuorumLost (!!datacenterName!!)", "info":"Two nodes went down in the cluster and lost corfu quorum.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"cluster-boot-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"step\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"CBM38\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - DfwHeapMem (!!datacenterName!!)", "info":"DFW heap memory exceeded configured threshold.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-esx\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"agg-service\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MPA11015\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - ProcessStatus (!!datacenterName!!)", "info":"Critical process status changed.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXProcessStatus\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - ClusterFailoverStatus (!!datacenterName!!)", "info":"SR high availability state changed or active/standby services failover.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXClusterFailoverStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^[1-9]|\\\\d{2,}$\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - BfdTunnelStatus (!!datacenterName!!)", "info":"BFD Tunnel status changed.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXBfdTunnelStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^[3-9]|\\\\d{2,}$\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - RoutingBgpNeighborStatus (!!datacenterName!!)", "info":"BGP neighbor status is down.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXRoutingBgpNeighborStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^0$\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - RoutingStatus (!!datacenterName!!)", "info":"Routing(BGP/BFD) is down.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXRoutingStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^0$\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - TnConnDown_15min (!!datacenterName!!)", "info":"Transport Node connection to a controller/Manager is down for at least 15 minutes.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"NEW_EVENT_TYPE", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-esx,nsx-edge,nsx-kvm\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"mpa,nsx-proxy\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MPA1009,MPA1011,PRX0803,PRX0105,PRX0805\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - TnConnDown_5min (!!datacenterName!!)", "info":"Transport Node connection to controller/Manager is down for at least 5 minutes.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"NEW_EVENT_TYPE", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-esx,nsx-edge,nsx-kvm\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"mpa,nsx-proxy\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MPA1009,MPA1011,PRX0803,PRX0105,PRX0805\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - ServiceDown (!!datacenterName!!)", "info":"One or more services are down.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"heartbeatservice-server\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"ServiceMonitor\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"HBS153\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - IpNotAvailableInPool (!!datacenterName!!)", "info":"There is no IP available in the Pool or reaches configured threshold.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MP5137,MP5109\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - LoadBalancerError (!!datacenterName!!)", "info":"NSX Load Balancer Service status is ERROR.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MP7505\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - LoadBalancerDown (!!datacenterName!!)", "info":"NSX Load Balancer Service status is DOWN.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MP7506\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - LoadBalancerVsDown (!!datacenterName!!)", "info":"VS status: all pool members are down.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-edge\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-edge-lb.lb\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"EDG1200001\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - LoadBalancerPoolDown (!!datacenterName!!)", "info":"Pool status: all pool members are down.", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"startTimeMillis\":1560560370535,\"endTimeMillis\":1560560674224,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-edge\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-edge-lb.lb\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"EDG1200000\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" }, { "name":"NSX-T - ProcessCrash (!!datacenterName!!)", "info":"Process or daemon crashes in the datapath or other LB process like dispatcher, etc..", "recommendation":"", "enabled": true, "emailEnabled": true, "emails": "!!email!!", "webhookEnabled": false, "autoClearAlertAfterTimeout": false, "alertType":"RATE_BASED", "hitOperator":"GREATER_THAN", "hitCount":0.0, "searchPeriod":660000, "searchInterval":60000, "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager,nsx-edge,nsx-autonomous-edge\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"node-mgmt\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"Core file generated\"},{\"internalName\":\"vmw_datacenter\",\"operator\":\"CONTAINS\",\"value\":\"!!datacenterName!!\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}", "vcopsEnabled": false, "vcopsResourceName": "!!datacenterName!!", "vcopsResourceKindKey": "", "vcopsCriticality": "critical" } ] |