Adding alerts

You can set alerts and configure notifications for them.

In the application bar area, click the Alerts list and select Add Alert.
In the Alerts Details section, enter the following details:
- Name A unique name with maximum length of 100 characters. (Alert name cannot contain special characters except underscore and space.)
- Severity Severity level - Critical is red and Warning is amber.
In the Alert Resource section, enter the following details:
- Select Select the target to add the alert.
- Choose Select one or more target instances.
- Include future instances Automatically apply the alert to future target instances. (This option is only available if all target instances are selected.)
- Create Alerts on Select the resource for which you want to set the alert.
- For Instance(s) Select the resource instance.
  Note: The resource instances can be filtered based on certain criteria. For example, the disk type is displayed for RAID Pool Tier resource. You can filter the resource instances using the filter option (disk type) and then set alerts for the filtered resources. You can also choose to skip resource instances from the filtered list.
- Include future instances Automatically include any future resource instances. (This option is only available if all resource instances are selected.)
In the Alert Condition section, you can set alert condition on performance and configuration metrics:
When adding an alert condition, you can define the static threshold for all metrics listed in the Metric list. You can also define the dynamic threshold for a few metrics. Analyzer detail view analyzes the data patterns for the last 7 days and automatically calculates a dynamic threshold each day based on a formula. The alerts are generated when the dynamic threshold is violated. Currently, dynamic thresholds are supported for a few Hitachi Block Storage configuration and performance metrics. Refer to the Hitachi Analyzer Detail View Metrics Reference Guide for the list of metrics that suppport dynamic threshold. See Understanding dynamic thresholds for more information.
- To set up an alert condition for configuration metrics, enter the following details:
  - Metric Select the configuration metric.
    Note: If a resource does not have a configuration metric for alerting, it is not displayed in the list.
  - Condition Select the condition type. Metrics with numeric values use greater than, between, and less than. Metrics with string values use the having condition.
    Note:
    
    Under certain circumstances, Analyzer detail view cannot identify whether a metric is a numeric or string value. When this occurs, all condition types are listed. To select the proper condition, you must know whether the metric is a numeric value or a string. You can find the value by running the query in Report Builder. See, Identifying the metric value.
    
    Dynamic thresholds only support the greater than and less than conditions.
  - Threshold If a metric supports dynamic thresholds, you can choose whether you want to define a static or dynamic threshold.
    - Static threshold: Type or select a static threshold value.
      (Certain metrics with string values include predefined thresholds.) The value set for the having condition is saved and is available for other users.
      
      The threshold value specified in this field applies to all the selected resource instances.
      
      Note: The having condition supports alphanumeric characters, hyphen (-), underscore (_) , comma (,), colon (:), at (@), slash (/), dot (.), and space.
      
      Customize Threshold For Resources Click this link to customize the value for a specific resource instance.
      The Customize Threshold for Resources window is displayed. The instances selected in the Alert Resource section are displayed.
      
      Select the instances for which you want to customize the threshold. You can also filter the instances based on criteria, such as disk type.
      
      In the Set Custom Threshold field, enter a value and then click Update. The threshold value is updated for the selected instances.
      
      Click OK.
    - Dynamic threshold: The dynamic threshold is derived by adding the values of Daily Moving Average (DMA) and Standard Deviation (SD). Analyzer detail view uses last 7 days data to calculate the DMA and SD values. Based on DMA and SD values, the dynamic threshold is determined everyday when a day is changed (as per Analyzer detail view application time zone). You can select one of the following options:
      
      7 DMA + or - 1 SD
      
      7 DMA + or - 2 SD
      
      7 DMA + or - 3 SD
      
      Note: Depending on the selection in the Condition field, the + (plus) or - (minus) SD is listed. For greater than, the "DMA + SD" options are listed. For less than, the "DMA - SD" options are listed.
      
      SD is calculated by applying a formula. 1 SD is a value derived from a formula. 2 SD and 3 SD is the value of 1 SD multiplied by 2 and 3, respectively.
      
      For example, assume the DMA value is 20 and SD value is 10. The calculation will be as follows:
      
      7 DMA + 1 SD= 30
      
      7 DMA + 2 SD = 40
      
      7 DMA + 3 SD = 50
      
      You can define one of the above dynamic thresholds according to your needs. For example, you might want to use the 7 DMA + 1 SD and 7 DMA + 2 SD thresholds for the alert violation in normal cases. If you want to identify a suspicious activity (like a malware attack), defining 7 DMA + 3 SD as a threshold might be more appropriate in which the threshold is continuously violated for a significant duration.
    Note: Dynamic thresholds cannot be defined using REST API.
- To set up the alert condition for performance metrics, enter the following details:
  - Metric Select the performance metric.
  - Condition Select the condition type: greater than, between, or less than.
    Note: Dynamic thresholds only support the greater than and less than conditions.
  - Threshold If a metric supports dynamic thresholds, you can choose whether you want to define a static or dynamic threshold.
    - Static threshold: Type the threshold value.
      The threshold value specified in this field applies to all resources selected.
      
      Customize Threshold For Resources Click to customize the value for a specific resource instance.
      The Customize Threshold for Resources window is displayed along with the instances selected in the Alert Resource section.
      
      Select the instances you want to customize. You can also filter the instances based on criteria, such as disk type.
      
      In the Set Custom Threshold field, enter a value and then click Update. The threshold value is updated for the selected instances.
      
      Click OK.
    - Dynamic threshold: The dynamic threshold is derived by adding the values of Daily Moving Average (DMA) and Standard Deviation (SD). Analyzer detail view uses last 7 days data to calculate the DMA and SD values. Based on DMA and SD values, the dynamic threshold is determined everyday when a day is changed (as per Analyzer detail view application time zone). You can select one of the following options:
      
      7 DMA + or - 1 SD
      
      7 DMA + or - 2 SD
      
      7 DMA + or - 3 SD
      
      Note: Depending on the selection in the Condition field, the + (plus) or - (minus) SD is listed. For greater than, the "DMA + SD" options are listed. For less than, the "DMA - SD" options are listed.
      
      SD is calculated by applying a formula. 1 SD is a value derived from a formula. 2 SD and 3 SD is the value of 1 SD multiplied by 2 and 3, respectively.
      
      For example, assume the DMA value is 20 and SD value is 10. The calculation will be as follows:
      
      7 DMA + 1 SD= 30
      
      7 DMA + 2 SD = 40
      
      7 DMA + 3 SD = 50
      
      You can define one of the above dynamic thresholds according to your needs. For example, you might want to use the 7 DMA + 1 SD and 7 DMA + 2 SD thresholds for the alert violation in normal cases. If you want to identify a suspicious activity (like a malware attack), defining 7 DMA + 3 SD as a threshold might be more appropriate in which the threshold is continuously violated for a significant duration.
    Note: Dynamic thresholds cannot be defined using REST API.
  - Criteria Select the criteria. (The maximum value for minutes is 60). It is important to set an appropriate criteria. For example, for Dynamic threshold, if you set the criteria as 1 sample of 30 minutes, an alert will be generated for each violation and you might receive too many alert notifications. Instead, you can choose the criteria for a significant number of data samples and duration. Suppose data granularity is one minute and you set the criteria as 25 samples out of 30 minutes. So, at least 30 data points out of 30 minutes are checked and an alert is generated when 25 data points exceed the threshold. It helps you to understand that something is not normal for a significant duration (in this case it is 25 out of 30 minutes).
    To select the proper alert criteria you must know the data collection interval of the metric as described in Identifying the collection interval.
    Note:
    
    If you want to add alerts for metrics with a data collection interval exceeding 60 minutes, you must configure the data collection interval for these metrics at least 60 minutes on the RAID Agent.
    
    The Criteria field is not applicable for the configuration metric. You can select criteria only for the performance metric.
  - Monitor Between Select the monitoring time. The alert monitoring window is based on UTC timezone. If applicable, also consider the Daylight Saving Time. For example, if the Analyzer detail view appllication timezone is set to Pacific Time (GMT-08:00) and you want to add alert for time window 9:00 AM to 7:00 PM, then set alert monitoring window as 05:00 PM to 03:00 AM.
    Note: The Monitor Between field is not applicable for the configuration metric. You can select the monitoring time only for the performance metric.
In the Alert Notification section, click the Email, Syslog, or SNMP tab and provide the following details:
- Email Select the email groups to which you want to send the notification, or type the individual email address. You can choose any of the following options:
  - Each alert violation Sends a notification on every alert.
  - Hourly or Daily Sends notification hourly or daily.
  - The first alert violation Sends the first violation alert and suppresses subsequent alert notifications when alert violations happen for an extended period. Sends the second notification when the alert condition is ended.
  Note: You can add email groups in Manage > Manage Email groups and the email address in Manage > Manage SMTP.
- Syslog server Select the Syslog server.
  Note: You can configure the Syslog server in Manage > Manage Syslog.
- SNMP Manager Select the SNMP Manager.
  Note:
  - You can configure the SNMP Manager in Manage > Manage SNMP.
  - If you select SNMP Manager, alert violations based on real-time data are not sent. Only alert violations from the Analyzer detail view server database are sent to the SNMP Manager.
Click Add Alert.