CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix nsm influxdb alert

Browse Source
This commit is contained in:
reyesj2
2025-04-23 15:02:57 -05:00
parent 400739736d
commit 9e4c456eb9
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
salt/influxdb/templates/alarm_nsm_disk.json
View File

@@ -5,10 +5,10 @@
"name": "alarm-nsm-disk" "name": "alarm-nsm-disk"
}, },
"spec": { "spec": {
"description": "Percent used space on the root partition of at least one node has exceeded the alarm threshold.", "description": "Percent used space on the nsm partition of at least one node has exceeded the alarm threshold.",
"every": "1m0s", "every": "1m0s",
"name": "NSM Disk High Usage", "name": "NSM Disk High Usage",
"query": "from(bucket: \"telegraf/so_short_term\")\n |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n |> filter(fn: (r) => r[\"_measurement\"] == \"disk\")\n |> filter(fn: (r) => r[\"path\"] == \"/\")\n |> filter(fn: (r) => r[\"_field\"] == \"used_percent\")\n |> aggregateWindow(every: 1m, fn: max, createEmpty: false)\n |> yield(name: \"max\")", "query": "from(bucket: \"telegraf/so_short_term\")\n |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n |> filter(fn: (r) => r[\"_measurement\"] == \"disk\")\n |> filter(fn: (r) => r[\"path\"] == \"/nsm\")\n |> filter(fn: (r) => r[\"_field\"] == \"used_percent\")\n |> aggregateWindow(every: 1m, fn: max, createEmpty: false)\n |> yield(name: \"max\")",
"status": "active", "status": "active",
"statusMessageTemplate": "Check: ${ r._check_name } is: ${ r._level }", "statusMessageTemplate": "Check: ${ r._check_name } is: ${ r._level }",
"thresholds": [ "thresholds": [