• Forums
    • Public Forums
      • Community Connect
      • Dynatrace
        • Dynatrace Open Q&A
      • Application Monitoring & UEM
        • AppMon & UEM Open Q&A
      • Network Application Monitoring
        • NAM Open Q&A
  • Home /
  • Public Forums /
  • Application Monitoring & UEM /
  • AppMon & UEM Open Q&A /
avatar image
Question by Melanie Z. · Apr 15, 2015 at 03:55 AM ·

Why isn't my Incident alert firing?

 

 

Hi, I am trying to set up an incident alert with the following conditions:
For all URIs containing "/atlas/SSO/SSOEndpoint.ashx", check the response header field, Location, for the string "Failed SSO".  

 

Basically I want an email alert to be sent when there is the string "Failed SSO" in the Location response header of this URI - "/atlas/SSO/SSOEndpoint.ashx"

 

I've created this measure and the incident rule below, but I haven't gotten any emails even though  I know the condition has been met. What am I doing wrong? Is my evaluation threshold not correct?

Comment

People who like this

0 Show 0
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

3 Replies

  • Sort: 
  • Most voted
  • Newest
  • Oldest
avatar image

Answer by Melanie Z. · Apr 15, 2015 at 06:53 AM

Thank you Rick! I really appreciate your thoroughness and quick response!

Comment

People who like this

0 Show 0 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

avatar image

Answer by Melanie Z. · Apr 15, 2015 at 06:10 AM

Thanks.

 

So I created a BT with this measure as a filter...

 

 

 

and I've configured my Incident to look like this...does this look right?

Comment

People who like this

0 Show 1 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

avatar image Rick B. · Apr 15, 2015 at 06:16 AM 0
Share

Yep!  One problem: you shouldn't be splitting BTs on unique values like Account ID.  This will cause too many splittings and your Business Transaction will put overhead on the Performance Warehouse until the BT stops working.

avatar image

Answer by Rick B. · Apr 15, 2015 at 04:21 AM

Hi,

Probably this measure should not be selectable from the Incident configuration as it doesn't actually generate any data on its own - it needs to be a part of a Business Transaction.  Here's how you can get this working:

  • Create a Business Transaction
  • with your measure "Atlas-SSOEndpoint (Failed SSO Error)" you will do one of two things:
    • If the number of unique messages (values for msg=*) is high or infinite, you should take the transformation regex out, set the evaluation to "occurrence" and add it to the Filter section of the Business Transaction.  Otherwise:
    • Add it in the splitting section.
  • Edit your incident rule by removing the existing condition measure and adding the new one:
    • Business Transactions -> (your BT) -> PurePath Response Time
    • Change the aggregation to count and set the upper severe threshold to 1

Let me know how that works for you.

Rick B

Comment

People who like this

0 Show 0 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

How to get started

First steps in the forum
Read Community User Guide
Best practices of using forum

NAM 2019 SP5 is available


Check the RHEL support added in the latest NAM service pack.

Learn more

LIVE WEBINAR

"Performance Clinic - Monitoring as a Self Service with Dynatrace"


JANUARY 15, 3:00 PM GMT / 10:00 AM ET

Register here

Follow this Question

Answers Answers and Comments

2 People are following this question.

avatar image avatar image

Forum Tags

dotnet mobile monitoring load iis 6.5 kubernetes mainframe rest api dashboard framework 7.0 appmon 7 health monitoring adk log monitoring services auto-detection uem webserver test automation license web performance monitoring ios nam probe collector migration mq web services knowledge sharing reports window java hybris javascript appmon sensors good to know extensions search 6.3+ server documentation easytravel web dashboard kibana system profile purelytics docker splunk 6.1 process groups account 7.2 rest dynatrace saas spa guardian appmon administration production user actions postgresql upgrade oneagent measures security Dynatrace Managed transactionflow technologies diagnostics user session monitoring unique users continuous delivery sharing configuration alerting NGINX splitting business transaction client 6.3 installation database scheduler apache mobileapp RUM php dashlet azure purepath agent 7.1 appmonsaas messagebroker nodejs 6.2 android sensor performance warehouse
  • Forums
  • Public Forums
    • Community Connect
    • Dynatrace
      • Dynatrace Open Q&A
    • Application Monitoring & UEM
      • AppMon & UEM Open Q&A
    • Network Application Monitoring
      • NAM Open Q&A