Windows Policies

Policy names are prefixed with Windows –

Policy name Duration Condition 1 (and) Condition 2 (and) Condition 3 Cat. Description
Elevated Disk Latency 15 min physical_disk._Total.avg_sec_per_read has an upper baseline deviation physical_disk._Total.avg_sec_per_write has an upper baseline deviation WARNING This policy will generate a WARNING event when both disk read and write times are higher than their expected baselines
Elevated MemoryUtilization 10 min metricly.winsrv.memory.utilizationpercent has an upper baseline deviation + an upper contextual deviation WARNING This policy will generate a WARNING event when memory utilization on the Windows server is higher than expected.
Heavy CPU Load 15 min metricly.winsrv.system.processor_queue_length_normalized has a static threshold > 2 processor._Total.percent_processor_time has an upper baseline deviation + an upper contextual deviation system.context_switches_per_sec has an upper baseline deviation + an upper contextual deviation CRITICAL High CPU values by themselves are not always a good indicator of server being under heavy load. This policy looks for upper deviations not only in CPU, but in run queue size (system.processor_queue_length) and context switches as well. Taken together, upper deviations in all three of these key metrics are a good indication of an overloaded server.
Heavy Disk Load 15 min physical_disk._Total.avg_queue_length has an upper baseline deviation + an upper contextual deviation WARNING This policy will generate a WARNING event if the average disk queue length for the server is higher than expected, indicating a potential problem with heavy disk load.