no_authen_traps no_process_sets no_remoteshell_group no_actions no_trapcommunity_table no_stat_floppy no_warmstart_discovery ################################################################################ # Self Monitors ################################################################################ monitor oid memCapacity.0 11 0x300200 300 absolute >= 95 'Physical Memory Usage (percentage)' '' 'Memory' 'Total' 'PercentUsed' warning monitor oid memCapacity.0 12 0x300200 300 absolute >= 98 'Physical Memory Usage (percentage)' '' 'Memory' 'Total' 'PercentUsed' minor monitor oid cpuTotalIdlePercent.0 13 0x600200 120 absolute <= 10 'CPU Idle Time (percentage)' '' 'CPU' 'Total' 'PercentIdle' warning monitor oid cpuTotalIdlePercent.0 14 0x600200 120 absolute <= 5 'CPU Idle Time (percentage)' '' 'CPU' 'Total' 'PercentIdle' minor monitor oid diskStatsUtilization.1 15 0x300200 300 absolute >= 90 'Disk Busy Time (percentage)' '' 'Disk' 'First' 'PercentBusy' warning monitor oid diskStatsUtilization.1 16 0x300200 300 absolute >= 95 'Disk Busy Time (percentage)' '' 'Disk' 'First' 'PercentBusy' minor ################################################################################ # Process Monitors ################################################################################ watch process procAlive 'Cluster Service' 508000 0x8000 30 absoluteValue ne 1 'Watch cluster service' '' 'processEntry' '//./Cluster Service' 'procAlive' critical ################################################################################ # Windows Event Log Monitors # template watch ntevent # exclusion example # watch ntevent 505002 0x308 Application Error '.*' '^((?!(\[17836\])).)*$' 'Application - ERROR' '' critical ################################################################################ #2003 Cluster #watch ntevent 508001 0x148 System All 'ClusSvc' '.*' 'SystemEDGE: cluster event' '' critical watch ntevent 508002 0x148 System Warning 'ClusSvc' '.*' 'SystemEDGE: cluster warning event' '' major watch ntevent 508003 0x148 System Error 'ClusSvc' '.*' 'SystemEDGE: cluster error event' '' critical watch ntevent 508004 0x148 System Failure 'ClusSvc' '.*' 'SystemEDGE: cluster failure event' '' critical watch ntevent 508010 0x148 System All 'ClusSvc' '\[1006\]' 'SystemEDGE: halted' '' critical watch ntevent 508011 0x148 System All 'ClusSvc' '\[1007\]' 'SystemEDGE: new cluster node added' '' critical watch ntevent 508012 0x148 System All 'ClusSvc' '\[1009\]' 'SystemEDGE: could not join cluster' '' critical watch ntevent 508013 0x148 System All 'ClusSvc' '\[1011\]' 'SystemEDGE: node evicted' '' critical watch ntevent 508014 0x148 System All 'ClusSvc' '\[1012\]' 'SystemEDGE: did not start' '' critical watch ntevent 508015 0x148 System All 'ClusSvc' '\[1015\]' 'SystemEDGE: no cluster checkpoint found' '' critical watch ntevent 508016 0x148 System All 'ClusSvc' '\[1016\]' 'SystemEDGE: checkpoint failure' '' critical watch ntevent 508017 0x148 System All 'ClusSvc' '\[1019\]' 'SystemEDGE: quorum log corrupt' '' critical watch ntevent 508018 0x148 System All 'ClusSvc' '\[1021\]' 'SystemEDGE: insufficient quorum disk space' '' critical watch ntevent 508019 0x148 System All 'ClusSvc' '\[1022\]' 'SystemEDGE: insufficient quorum disk space' '' critical watch ntevent 508020 0x148 System All 'ClusSvc' '\[1023\]' 'SystemEDGE: quorum not found' '' critical watch ntevent 508021 0x148 System All 'ClusSvc' '\[1056\]' 'SystemEDGE: db in invalid state' '' critical watch ntevent 508022 0x148 System All 'ClusSvc' '\[1070\]' 'SystemEDGE: could not join cluster' '' critical watch ntevent 508023 0x148 System All 'ClusSvc' '\[1073\]' 'SystemEDGE: halted to prevent inconsistency' '' critical #2008 Cluster watch ntevent 508024 0x148 System Error 'FailoverClustering' '.*' 'Cluster Error Event' '' critical watch ntevent 508025 0x148 System Warning 'FailoverClustering' '.*' 'Cluster Warning Event' '' major sysedge_plugin C:\sysedge\plugins\idd\bin\iddmod43.dll