mirrors/monitoring-mixins-website
1
0
Fork 0
mirror of https://github.com/monitoring-mixins/website.git synced 2024-12-14 11:37:31 +00:00
Code Activity

assets,site/content: daily assets regeneration

Browse source
This commit is contained in:
github-actions[bot] 2024-11-07 03:31:28 +00:00
parent 321dc7a232
commit 3e4f531005
6 changed files with 63 additions and 62 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

23
assets/windows-active-directory/alerts.yaml
View file

@ -7,7 +7,7 @@ groups:
CPU usage on host {{ $labels.instance }} is above 90%. The current value is {{ $value | printf "%.2f" }}%. CPU usage on host {{ $labels.instance }} is above 90%. The current value is {{ $value | printf "%.2f" }}%.
summary: High CPU usage on Windows host. summary: High CPU usage on Windows host.
expr: | expr: |
100 - (avg without (mode, core) (rate(windows_cpu_time_total{job=~"integrations/windows_exporter", mode="idle"}[2m])) * 100) > 90 100 - (avg without (mode, core) (rate(windows_cpu_time_total{job=~".*windows.*", mode="idle"}[2m])) * 100) > 90
for: 15m for: 15m
keep_firing_for: 5m keep_firing_for: 5m
labels: labels:
@ -18,9 +18,9 @@ groups:
Memory usage on host {{ $labels.instance }} is above 90%. The current value is {{ $value | printf "%.2f" }}%. Memory usage on host {{ $labels.instance }} is above 90%. The current value is {{ $value | printf "%.2f" }}%.
summary: High memory usage on Windows host. summary: High memory usage on Windows host.
expr: | expr: |
100 - ((windows_os_physical_memory_free_bytes{job=~"integrations/windows_exporter"} 100 - ((windows_os_physical_memory_free_bytes{job=~".*windows.*"}
/ /
windows_cs_physical_memory_bytes{job=~"integrations/windows_exporter"}) * 100) > 90 windows_cs_physical_memory_bytes{job=~".*windows.*"}) * 100) > 90
for: 15m for: 15m
keep_firing_for: 5m keep_firing_for: 5m
labels: labels:
@ -31,7 +31,7 @@ groups:
Volume {{ $labels.volume }} is almost full on host {{ $labels.instance }}, more than 90% of space is used. The current volume utilization is {{ $value | printf "%.2f" }}%. Volume {{ $labels.volume }} is almost full on host {{ $labels.instance }}, more than 90% of space is used. The current volume utilization is {{ $value | printf "%.2f" }}%.
summary: Disk is almost full on Windows host. summary: Disk is almost full on Windows host.
expr: | expr: |
100 - ((windows_logical_disk_free_bytes{job=~"integrations/windows_exporter"} ) / (windows_logical_disk_size_bytes{job=~"integrations/windows_exporter"})) * 100 > 90 100 - ((windows_logical_disk_free_bytes{job=~".*windows.*"} ) / (windows_logical_disk_size_bytes{job=~".*windows.*"})) * 100 > 90
for: 15m for: 15m
keep_firing_for: 5m keep_firing_for: 5m
labels: labels:
@ -42,7 +42,7 @@ groups:
Windows service {{ $labels.name }} is not in healthy state, currently in '{{ $labels.status }}'. Windows service {{ $labels.name }} is not in healthy state, currently in '{{ $labels.status }}'.
summary: Windows service is not healthy. summary: Windows service is not healthy.
expr: | expr: |
windows_service_status{job=~"integrations/windows_exporter", status!~"starting|stopping|ok"} > 0 windows_service_status{job=~".*windows.*", status!~"starting|stopping|ok"} > 0
for: 5m for: 5m
labels: labels:
severity: critical severity: critical
@ -52,7 +52,7 @@ groups:
Windows disk {{ $labels.name }} is not in healthy state, currently in '{{ $labels.status }}' status. Windows disk {{ $labels.name }} is not in healthy state, currently in '{{ $labels.status }}' status.
summary: Windows physical disk is not healthy. summary: Windows physical disk is not healthy.
expr: | expr: |
windows_disk_drive_status{job=~"integrations/windows_exporter", status="OK"} != 1 windows_disk_drive_status{job=~".*windows.*", status="OK"} != 1
for: 5m for: 5m
labels: labels:
severity: critical severity: critical
@ -62,7 +62,7 @@ groups:
Round-trip time of NTP client on instance {{ $labels.instance }} is greater than 1 second. Delay is {{ $value }} sec. Round-trip time of NTP client on instance {{ $labels.instance }} is greater than 1 second. Delay is {{ $value }} sec.
summary: NTP client delay. summary: NTP client delay.
expr: | expr: |
windows_time_ntp_round_trip_delay_seconds{job=~"integrations/windows_exporter"} > 1 windows_time_ntp_round_trip_delay_seconds{job=~".*windows.*"} > 1
for: 5m for: 5m
keep_firing_for: 5m keep_firing_for: 5m
labels: labels:
@ -73,7 +73,7 @@ groups:
NTP time offset for instance {{ $labels.instance }} is greater than 1 second. Offset is {{ $value }} sec. NTP time offset for instance {{ $labels.instance }} is greater than 1 second. Offset is {{ $value }} sec.
summary: NTP time offset is too large. summary: NTP time offset is too large.
expr: | expr: |
windows_time_computed_time_offset_seconds{job=~"integrations/windows_exporter"} > 1 windows_time_computed_time_offset_seconds{job=~".*windows.*"} > 1
for: 5m for: 5m
keep_firing_for: 5m keep_firing_for: 5m
labels: labels:
@ -85,8 +85,7 @@ groups:
summary: There is a high number of pending replication operations in Active summary: There is a high number of pending replication operations in Active
Directory. A high number of pending operations sustained over a period of Directory. A high number of pending operations sustained over a period of
time can indicate a problem with replication. time can indicate a problem with replication.
expr: "windows_ad_replication_pending_operations{job=~\"integrations/windows_exporter\"} expr: "windows_ad_replication_pending_operations{job=~\".*windows.*\"} >= 50 \n"
>= 50 \n"
for: 10m for: 10m
keep_firing_for: 5m keep_firing_for: 5m
labels: labels:
@ -98,7 +97,7 @@ groups:
summary: There are a number of replication synchronization request failures. summary: There are a number of replication synchronization request failures.
These can cause authentication failures, outdated information being propagated These can cause authentication failures, outdated information being propagated
across domain controllers, and potentially data loss or inconsistencies. across domain controllers, and potentially data loss or inconsistencies.
expr: "increase(windows_ad_replication_sync_requests_schema_mismatch_failure_total{job=~\"integrations/windows_exporter\"}[5m]) expr: "increase(windows_ad_replication_sync_requests_schema_mismatch_failure_total{job=~\".*windows.*\"}[5m])
> 0 \n" > 0 \n"
for: 5m for: 5m
keep_firing_for: 5m keep_firing_for: 5m
@ -112,7 +111,7 @@ groups:
summary: There is a high number of password changes. This may indicate unauthorized summary: There is a high number of password changes. This may indicate unauthorized
changes or attacks. changes or attacks.
expr: | expr: |
increase(windows_ad_sam_password_changes_total{job=~"integrations/windows_exporter"}[5m]) > 25 increase(windows_ad_sam_password_changes_total{job=~".*windows.*"}[5m]) > 25
for: 5m for: 5m
labels: labels:
keep_firing_for: 24h keep_firing_for: 24h

40
assets/windows-active-directory/dashboards/activedirectory
View file

@ -7,7 +7,7 @@
"uid": "${loki_datasource}" "uid": "${loki_datasource}"
}, },
"enable": true, "enable": true,
"expr": "{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\", channel=\"System\", level=\"Critical\"} | json", "expr": "{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\", channel=\"System\", level=\"Critical\"} | json",
"hide": true, "hide": true,
"iconColor": "light-purple", "iconColor": "light-purple",
"name": "Critical system event", "name": "Critical system event",
@ -21,7 +21,7 @@
"uid": "${datasource}" "uid": "${datasource}"
}, },
"enable": true, "enable": true,
"expr": "windows_system_system_up_time{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}*1000 > $__from < $__to", "expr": "windows_system_system_up_time{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\"}*1000 > $__from < $__to",
"hide": true, "hide": true,
"iconColor": "light-yellow", "iconColor": "light-yellow",
"name": "Reboot", "name": "Reboot",
@ -35,7 +35,7 @@
"uid": "${loki_datasource}" "uid": "${loki_datasource}"
}, },
"enable": true, "enable": true,
"expr": "{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\", source=\"Service Control Manager\", level=\"Error\"} |= \"terminated\" | json", "expr": "{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\", source=\"Service Control Manager\", level=\"Error\"} |= \"terminated\" | json",
"hide": true, "hide": true,
"iconColor": "light-orange", "iconColor": "light-orange",
"name": "Service failed", "name": "Service failed",
@ -51,7 +51,7 @@
"includeVars": true, "includeVars": true,
"keepTime": true, "keepTime": true,
"tags": [ "tags": [
"active-directory" "windows"
], ],
"title": "All Windows Active Directory dashboards", "title": "All Windows Active Directory dashboards",
"type": "dashboards" "type": "dashboards"
@ -95,7 +95,7 @@
"type": "prometheus", "type": "prometheus",
"uid": "${datasource}" "uid": "${datasource}"
}, },
"expr": "sum(windows_ad_replication_pending_operations{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"})", "expr": "sum(windows_ad_replication_pending_operations{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\"})",
"legendFormat": "Operations" "legendFormat": "Operations"
} }
], ],
@ -139,7 +139,7 @@
"type": "prometheus", "type": "prometheus",
"uid": "${datasource}" "uid": "${datasource}"
}, },
"expr": "sum(windows_ad_directory_service_threads{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"})", "expr": "sum(windows_ad_directory_service_threads{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\"})",
"legendFormat": "Directory service threads" "legendFormat": "Directory service threads"
} }
], ],
@ -159,7 +159,7 @@
}, },
"id": 3, "id": 3,
"options": { "options": {
"alertInstanceLabelFilter": "job=~\"integrations/windows_exporter\",job=~\"${job:regex}\",instance=~\"${instance:regex}\"" "alertInstanceLabelFilter": "job=~\".*windows.*\",job=~\"${job:regex}\",instance=~\"${instance:regex}\""
}, },
"pluginVersion": "v10.0.0", "pluginVersion": "v10.0.0",
"title": "Windows Active Directory alerts", "title": "Windows Active Directory alerts",
@ -202,7 +202,7 @@
"type": "prometheus", "type": "prometheus",
"uid": "${datasource}" "uid": "${datasource}"
}, },
"expr": "sum(windows_ad_replication_pending_synchronizations{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"})", "expr": "sum(windows_ad_replication_pending_synchronizations{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\"})",
"legendFormat": "Operations" "legendFormat": "Operations"
} }
], ],
@ -251,7 +251,7 @@
"type": "prometheus", "type": "prometheus",
"uid": "${datasource}" "uid": "${datasource}"
}, },
"expr": "rate(windows_ad_binds_total{bind_method=~\"ldap\", job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])", "expr": "rate(windows_ad_binds_total{bind_method=~\"ldap\", job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])",
"legendFormat": "{{instance}}" "legendFormat": "{{instance}}"
} }
], ],
@ -300,7 +300,7 @@
"type": "prometheus", "type": "prometheus",
"uid": "${datasource}" "uid": "${datasource}"
}, },
"expr": "rate(windows_ad_directory_operations_total{origin=~\"ldap\", job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])", "expr": "rate(windows_ad_directory_operations_total{origin=~\"ldap\", job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])",
"legendFormat": "{{instance}} - {{ operation }}" "legendFormat": "{{instance}} - {{ operation }}"
} }
], ],
@ -565,7 +565,7 @@
"type": "prometheus", "type": "prometheus",
"uid": "${datasource}" "uid": "${datasource}"
}, },
"expr": "rate(windows_ad_binds_total{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])", "expr": "rate(windows_ad_binds_total{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])",
"legendFormat": "{{instance}} - {{ operation }}" "legendFormat": "{{instance}} - {{ operation }}"
} }
], ],
@ -721,7 +721,7 @@
"type": "prometheus", "type": "prometheus",
"uid": "${datasource}" "uid": "${datasource}"
}, },
"expr": "rate(windows_ad_replication_data_intrasite_bytes_total{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval]) * 8", "expr": "rate(windows_ad_replication_data_intrasite_bytes_total{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval]) * 8",
"legendFormat": "{{instance}} - {{ direction }}" "legendFormat": "{{instance}} - {{ direction }}"
} }
], ],
@ -776,7 +776,7 @@
"type": "prometheus", "type": "prometheus",
"uid": "${datasource}" "uid": "${datasource}"
}, },
"expr": "rate(windows_ad_replication_data_intersite_bytes_total{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval]) * 8", "expr": "rate(windows_ad_replication_data_intersite_bytes_total{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval]) * 8",
"legendFormat": "{{instance}} - {{ direction }}" "legendFormat": "{{instance}} - {{ direction }}"
} }
], ],
@ -829,7 +829,7 @@
"type": "prometheus", "type": "prometheus",
"uid": "${datasource}" "uid": "${datasource}"
}, },
"expr": "rate(windows_ad_replication_inbound_objects_updated_total{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])", "expr": "rate(windows_ad_replication_inbound_objects_updated_total{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])",
"legendFormat": "{{instance}} objects" "legendFormat": "{{instance}} objects"
}, },
{ {
@ -837,7 +837,7 @@
"type": "prometheus", "type": "prometheus",
"uid": "${datasource}" "uid": "${datasource}"
}, },
"expr": "rate(windows_ad_replication_inbound_properties_updated_total{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])", "expr": "rate(windows_ad_replication_inbound_properties_updated_total{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])",
"legendFormat": "{{instance}} properties" "legendFormat": "{{instance}} properties"
} }
], ],
@ -972,7 +972,7 @@
"type": "prometheus", "type": "prometheus",
"uid": "${datasource}" "uid": "${datasource}"
}, },
"expr": "rate(windows_ad_database_operations_total{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])", "expr": "rate(windows_ad_database_operations_total{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])",
"legendFormat": "{{instance}} - {{ operation }}" "legendFormat": "{{instance}} - {{ operation }}"
} }
], ],
@ -1083,7 +1083,7 @@
"type": "prometheus", "type": "prometheus",
"uid": "${datasource}" "uid": "${datasource}"
}, },
"expr": "rate(windows_ad_database_operations_total{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])", "expr": "rate(windows_ad_database_operations_total{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])",
"legendFormat": "{{instance}} - {{ operation }}" "legendFormat": "{{instance}} - {{ operation }}"
} }
], ],
@ -1094,7 +1094,7 @@
"refresh": "1m", "refresh": "1m",
"schemaVersion": 36, "schemaVersion": 36,
"tags": [ "tags": [
"active-directory" "windows"
], ],
"templating": { "templating": {
"list": [ "list": [
@ -1114,7 +1114,7 @@
"label": "Job", "label": "Job",
"multi": true, "multi": true,
"name": "job", "name": "job",
"query": "label_values(windows_ad_directory_service_threads{job=~\"integrations/windows_exporter\"}, job)", "query": "label_values(windows_ad_directory_service_threads{job=~\".*windows.*\"}, job)",
"refresh": 2, "refresh": 2,
"sort": 1, "sort": 1,
"type": "query" "type": "query"
@ -1128,7 +1128,7 @@
"label": "Instance", "label": "Instance",
"multi": true, "multi": true,
"name": "instance", "name": "instance",
"query": "label_values(windows_ad_directory_service_threads{job=~\"integrations/windows_exporter\",job=~\"$job\"}, instance)", "query": "label_values(windows_ad_directory_service_threads{job=~\".*windows.*\",job=~\"$job\"}, instance)",
"refresh": 2, "refresh": 2,
"sort": 1, "sort": 1,
"type": "query" "type": "query"

26
assets/windows-active-directory/dashboards/logs
View file

@ -7,7 +7,7 @@
"uid": "${loki_datasource}" "uid": "${loki_datasource}"
}, },
"enable": true, "enable": true,
"expr": "{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\", channel=\"System\", level=\"Critical\"} | json", "expr": "{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\", channel=\"System\", level=\"Critical\"} | json",
"hide": true, "hide": true,
"iconColor": "light-purple", "iconColor": "light-purple",
"name": "Critical system event", "name": "Critical system event",
@ -21,7 +21,7 @@
"uid": "${datasource}" "uid": "${datasource}"
}, },
"enable": true, "enable": true,
"expr": "windows_system_system_up_time{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}*1000 > $__from < $__to", "expr": "windows_system_system_up_time{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\"}*1000 > $__from < $__to",
"hide": true, "hide": true,
"iconColor": "light-yellow", "iconColor": "light-yellow",
"name": "Reboot", "name": "Reboot",
@ -35,7 +35,7 @@
"uid": "${loki_datasource}" "uid": "${loki_datasource}"
}, },
"enable": true, "enable": true,
"expr": "{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\", source=\"Service Control Manager\", level=\"Error\"} |= \"terminated\" | json", "expr": "{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\", source=\"Service Control Manager\", level=\"Error\"} |= \"terminated\" | json",
"hide": true, "hide": true,
"iconColor": "light-orange", "iconColor": "light-orange",
"name": "Service failed", "name": "Service failed",
@ -51,7 +51,7 @@
"includeVars": true, "includeVars": true,
"keepTime": true, "keepTime": true,
"tags": [ "tags": [
"active-directory" "windows"
], ],
"title": "All Windows Active Directory dashboards", "title": "All Windows Active Directory dashboards",
"type": "dashboards" "type": "dashboards"
@ -204,7 +204,7 @@
"type": "loki", "type": "loki",
"uid": "${loki_datasource}" "uid": "${loki_datasource}"
}, },
"expr": "sum by (level) (count_over_time({job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\",channel=~\"$channel\",source=~\"$source\",keywords=~\"$keywords\",level=~\"$level\"}\n|~ \"$regex_search\"\n| json | __error__=``\n[$__interval]))\n", "expr": "sum by (level) (count_over_time({job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\",channel=~\"$channel\",source=~\"$source\",keywords=~\"$keywords\",level=~\"$level\"}\n|~ \"$regex_search\"\n| json | __error__=``\n[$__interval]))\n",
"legendFormat": "{{ level }}" "legendFormat": "{{ level }}"
} }
], ],
@ -246,7 +246,7 @@
"type": "loki", "type": "loki",
"uid": "${loki_datasource}" "uid": "${loki_datasource}"
}, },
"expr": "{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\",channel=~\"$channel\",source=~\"$source\",keywords=~\"$keywords\",level=~\"$level\"} \n|~ \"$regex_search\"\n| json | __error__=``\n| label_format timestamp=\"{{__timestamp__}}\"\n| drop channel_extracted,source_extracted,computer_extracted,level_extracted,keywords_extracted\n| line_format `{{ if eq \"[[instance]]\" \".*\" }}{{ alignLeft 25 .instance}}|{{end}}{{alignLeft 12 .channel }}| {{ alignLeft 25 .source}}| {{ .message }}`\n\n" "expr": "{job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\",channel=~\"$channel\",source=~\"$source\",keywords=~\"$keywords\",level=~\"$level\"} \n|~ \"$regex_search\"\n| json | __error__=``\n| label_format timestamp=\"{{__timestamp__}}\"\n| drop channel_extracted,source_extracted,computer_extracted,level_extracted,keywords_extracted\n| line_format `{{ if eq \"[[instance]]\" \".*\" }}{{ alignLeft 25 .instance}}|{{end}}{{alignLeft 12 .channel }}| {{ alignLeft 25 .source}}| {{ .message }}`\n\n"
} }
], ],
"title": "Logs", "title": "Logs",
@ -256,7 +256,7 @@
"refresh": "1m", "refresh": "1m",
"schemaVersion": 39, "schemaVersion": 39,
"tags": [ "tags": [
"active-directory" "windows"
], ],
"templating": { "templating": {
"list": [ "list": [
@ -277,7 +277,7 @@
"label": "Job", "label": "Job",
"multi": true, "multi": true,
"name": "job", "name": "job",
"query": "label_values({job=~\"integrations/windows_exporter\"}, job)", "query": "label_values({job=~\".*windows.*\"}, job)",
"refresh": 2, "refresh": 2,
"sort": 1, "sort": 1,
"type": "query" "type": "query"
@ -292,7 +292,7 @@
"label": "Instance", "label": "Instance",
"multi": true, "multi": true,
"name": "instance", "name": "instance",
"query": "label_values({job=~\"integrations/windows_exporter\",job=~\"$job\"}, instance)", "query": "label_values({job=~\".*windows.*\",job=~\"$job\"}, instance)",
"refresh": 2, "refresh": 2,
"sort": 1, "sort": 1,
"type": "query" "type": "query"
@ -307,7 +307,7 @@
"label": "Channel", "label": "Channel",
"multi": true, "multi": true,
"name": "channel", "name": "channel",
"query": "label_values({job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}, channel)", "query": "label_values({job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\"}, channel)",
"refresh": 2, "refresh": 2,
"sort": 1, "sort": 1,
"type": "query" "type": "query"
@ -322,7 +322,7 @@
"label": "Source", "label": "Source",
"multi": true, "multi": true,
"name": "source", "name": "source",
"query": "label_values({job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\",channel=~\"$channel\"}, source)", "query": "label_values({job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\",channel=~\"$channel\"}, source)",
"refresh": 2, "refresh": 2,
"sort": 1, "sort": 1,
"type": "query" "type": "query"
@ -337,7 +337,7 @@
"label": "Keywords", "label": "Keywords",
"multi": true, "multi": true,
"name": "keywords", "name": "keywords",
"query": "label_values({job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\",channel=~\"$channel\",source=~\"$source\"}, keywords)", "query": "label_values({job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\",channel=~\"$channel\",source=~\"$source\"}, keywords)",
"refresh": 2, "refresh": 2,
"sort": 1, "sort": 1,
"type": "query" "type": "query"
@ -352,7 +352,7 @@
"label": "Level", "label": "Level",
"multi": true, "multi": true,
"name": "level", "name": "level",
"query": "label_values({job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\",channel=~\"$channel\",source=~\"$source\",keywords=~\"$keywords\"}, level)", "query": "label_values({job=~\".*windows.*\",job=~\"$job\",instance=~\"$instance\",channel=~\"$channel\",source=~\"$source\",keywords=~\"$keywords\"}, level)",
"refresh": 2, "refresh": 2,
"sort": 1, "sort": 1,
"type": "query" "type": "query"

5
assets/windows/dashboards/overview
View file

@ -162,7 +162,7 @@
"calcs": [ "calcs": [
"lastNotNull" "lastNotNull"
], ],
"fields": "/^hostname$/" "fields": "/^instance$/"
} }
}, },
"pluginVersion": "v11.0.0", "pluginVersion": "v11.0.0",
@ -280,7 +280,8 @@
"color": { "color": {
"fixedColor": "text", "fixedColor": "text",
"mode": "fixed" "mode": "fixed"
} },
"unit": "none"
} }
}, },
"gridPos": { "gridPos": {

8
assets/windows/dashboards/system
View file

@ -314,7 +314,8 @@
"lineInterpolation": "smooth", "lineInterpolation": "smooth",
"lineWidth": 2, "lineWidth": 2,
"showPoints": "never" "showPoints": "never"
} },
"unit": "short"
} }
}, },
"gridPos": { "gridPos": {
@ -362,7 +363,8 @@
"lineInterpolation": "smooth", "lineInterpolation": "smooth",
"lineWidth": 2, "lineWidth": 2,
"showPoints": "never" "showPoints": "never"
} },
"unit": "short"
} }
}, },
"gridPos": { "gridPos": {
@ -530,7 +532,7 @@
"showPoints": "never" "showPoints": "never"
}, },
"noValue": "No data. Please check that \"time\" collector is enabled.", "noValue": "No data. Please check that \"time\" collector is enabled.",
"unit": "seconds" "unit": "s"
} }
}, },
"gridPos": { "gridPos": {

23
site/content/windows-active-directory/_index.md
View file

@ -27,7 +27,7 @@ annotations:
CPU usage on host {{ $labels.instance }} is above 90%. The current value is {{ $value | printf "%.2f" }}%. CPU usage on host {{ $labels.instance }} is above 90%. The current value is {{ $value | printf "%.2f" }}%.
summary: High CPU usage on Windows host. summary: High CPU usage on Windows host.
expr: | expr: |
100 - (avg without (mode, core) (rate(windows_cpu_time_total{job=~"integrations/windows_exporter", mode="idle"}[2m])) * 100) > 90 100 - (avg without (mode, core) (rate(windows_cpu_time_total{job=~".*windows.*", mode="idle"}[2m])) * 100) > 90
for: 15m for: 15m
keep_firing_for: 5m keep_firing_for: 5m
labels: labels:
@ -43,9 +43,9 @@ annotations:
Memory usage on host {{ $labels.instance }} is above 90%. The current value is {{ $value | printf "%.2f" }}%. Memory usage on host {{ $labels.instance }} is above 90%. The current value is {{ $value | printf "%.2f" }}%.
summary: High memory usage on Windows host. summary: High memory usage on Windows host.
expr: | expr: |
100 - ((windows_os_physical_memory_free_bytes{job=~"integrations/windows_exporter"} 100 - ((windows_os_physical_memory_free_bytes{job=~".*windows.*"}
/ /
windows_cs_physical_memory_bytes{job=~"integrations/windows_exporter"}) * 100) > 90 windows_cs_physical_memory_bytes{job=~".*windows.*"}) * 100) > 90
for: 15m for: 15m
keep_firing_for: 5m keep_firing_for: 5m
labels: labels:
@ -61,7 +61,7 @@ annotations:
Volume {{ $labels.volume }} is almost full on host {{ $labels.instance }}, more than 90% of space is used. The current volume utilization is {{ $value | printf "%.2f" }}%. Volume {{ $labels.volume }} is almost full on host {{ $labels.instance }}, more than 90% of space is used. The current volume utilization is {{ $value | printf "%.2f" }}%.
summary: Disk is almost full on Windows host. summary: Disk is almost full on Windows host.
expr: | expr: |
100 - ((windows_logical_disk_free_bytes{job=~"integrations/windows_exporter"} ) / (windows_logical_disk_size_bytes{job=~"integrations/windows_exporter"})) * 100 > 90 100 - ((windows_logical_disk_free_bytes{job=~".*windows.*"} ) / (windows_logical_disk_size_bytes{job=~".*windows.*"})) * 100 > 90
for: 15m for: 15m
keep_firing_for: 5m keep_firing_for: 5m
labels: labels:
@ -77,7 +77,7 @@ annotations:
Windows service {{ $labels.name }} is not in healthy state, currently in '{{ $labels.status }}'. Windows service {{ $labels.name }} is not in healthy state, currently in '{{ $labels.status }}'.
summary: Windows service is not healthy. summary: Windows service is not healthy.
expr: | expr: |
windows_service_status{job=~"integrations/windows_exporter", status!~"starting|stopping|ok"} > 0 windows_service_status{job=~".*windows.*", status!~"starting|stopping|ok"} > 0
for: 5m for: 5m
labels: labels:
severity: critical severity: critical
@ -92,7 +92,7 @@ annotations:
Windows disk {{ $labels.name }} is not in healthy state, currently in '{{ $labels.status }}' status. Windows disk {{ $labels.name }} is not in healthy state, currently in '{{ $labels.status }}' status.
summary: Windows physical disk is not healthy. summary: Windows physical disk is not healthy.
expr: | expr: |
windows_disk_drive_status{job=~"integrations/windows_exporter", status="OK"} != 1 windows_disk_drive_status{job=~".*windows.*", status="OK"} != 1
for: 5m for: 5m
labels: labels:
severity: critical severity: critical
@ -107,7 +107,7 @@ annotations:
Round-trip time of NTP client on instance {{ $labels.instance }} is greater than 1 second. Delay is {{ $value }} sec. Round-trip time of NTP client on instance {{ $labels.instance }} is greater than 1 second. Delay is {{ $value }} sec.
summary: NTP client delay. summary: NTP client delay.
expr: | expr: |
windows_time_ntp_round_trip_delay_seconds{job=~"integrations/windows_exporter"} > 1 windows_time_ntp_round_trip_delay_seconds{job=~".*windows.*"} > 1
for: 5m for: 5m
keep_firing_for: 5m keep_firing_for: 5m
labels: labels:
@ -123,7 +123,7 @@ annotations:
NTP time offset for instance {{ $labels.instance }} is greater than 1 second. Offset is {{ $value }} sec. NTP time offset for instance {{ $labels.instance }} is greater than 1 second. Offset is {{ $value }} sec.
summary: NTP time offset is too large. summary: NTP time offset is too large.
expr: | expr: |
windows_time_computed_time_offset_seconds{job=~"integrations/windows_exporter"} > 1 windows_time_computed_time_offset_seconds{job=~".*windows.*"} > 1
for: 5m for: 5m
keep_firing_for: 5m keep_firing_for: 5m
labels: labels:
@ -140,8 +140,7 @@ annotations:
summary: There is a high number of pending replication operations in Active Directory. summary: There is a high number of pending replication operations in Active Directory.
A high number of pending operations sustained over a period of time can indicate A high number of pending operations sustained over a period of time can indicate
a problem with replication. a problem with replication.
expr: "windows_ad_replication_pending_operations{job=~\"integrations/windows_exporter\"} expr: "windows_ad_replication_pending_operations{job=~\".*windows.*\"} >= 50
>= 50
" "
for: 10m for: 10m
keep_firing_for: 5m keep_firing_for: 5m
@ -159,7 +158,7 @@ annotations:
summary: There are a number of replication synchronization request failures. These summary: There are a number of replication synchronization request failures. These
can cause authentication failures, outdated information being propagated across can cause authentication failures, outdated information being propagated across
domain controllers, and potentially data loss or inconsistencies. domain controllers, and potentially data loss or inconsistencies.
expr: "increase(windows_ad_replication_sync_requests_schema_mismatch_failure_total{job=~\"integrations/windows_exporter\"}[5m]) expr: "increase(windows_ad_replication_sync_requests_schema_mismatch_failure_total{job=~\".*windows.*\"}[5m])
> 0 > 0
" "
for: 5m for: 5m
@ -179,7 +178,7 @@ annotations:
summary: There is a high number of password changes. This may indicate unauthorized summary: There is a high number of password changes. This may indicate unauthorized
changes or attacks. changes or attacks.
expr: | expr: |
increase(windows_ad_sam_password_changes_total{job=~"integrations/windows_exporter"}[5m]) > 25 increase(windows_ad_sam_password_changes_total{job=~".*windows.*"}[5m]) > 25
for: 5m for: 5m
labels: labels:
keep_firing_for: 24h keep_firing_for: 24h