This section gives you a better understanding of how the PATROL for Composite Attributes works in a real-time environment. The following are some sample scenarios for using arithmetic and logical expressions to evaluate results:
Deriving a new attribute by using an existing attribute
To derive a new attribute by using an existing attribute, use an arithmetic expression.
In a Windows environment to derive a new attribute MEMmemAvailableBytesGB by scaling down the value of the existing attribute MEMmemAvailableBytes (NT_MEMORY/NT_MEMORY).
Deriving a new attribute by using a combination of existing attributes
To derive a new attribute by using a combination of existing attributes, use an arithmetic expression.
In a Windows environment to derive a new attribute Network Utilization by using attributes Bytes Total per Second (NT_NETWORK/<instancesid>/NETniBytesTotalPerSec) and Current Bandwidth (NT_NETWORK/<instancesid>/NETniCurrentBandwidth).
(((Bytes Total/sec)*8)*100)/(Net Adapters current bandwidth)
Determining the resource assignment based on the set priority
To determine the resource assignment based on the set priority, use a logical expression. You can use a logical expression to set the alarm or warning that alerts you when a metric crosses the specified threshold.
In a virtual environment with critical virtual machines running all the time even in resource crunch situations. To keep track of memory throttling for such environments, you can derive an expression by comparing the weight of a critical virtual machine with the weight of non-critical virtual machine.
VM1\MemoryWeight > VM2\MemoryWeight
Tracking key metrics that consume more data
To keep track of data consumption in an environment, use a logical expression. A logical expression can be used to set the alarm or warning that will alert you when a metric crosses the specified threshold. The following example helps you to determine some of the key metrics of a device in Windows KM that consume more data:
To monitor some of the key metrics that consume more CPU in Windows KM, do the following:
A combination of high processor utilization and a lengthy processor queue indicates that the processor is overloaded. You can derive an expression to keep track of the processor load using the attributes Processor Utilization (NT_HEALTH/NT_HEALTH) and Processor Queue Length (NT_SYSTEM/NT_SYSTEM).
Processor Utilization > 90 && Processor Queue Length > 2