How to verify if a rule is functioning properly (4310350)

The first step is to review rule diagnostics

Dashboards| Administration| Rules & Notifications| Rules | Choose Cartridge: Non-Cartridge

Then, left click on specific custom rule name and choose Diagnostics

Under Diagnostic Details check:

• Rule Definition
  • Review the Status section
    • Ensure the rule is enabled
    • Ensure the rule is not blacked out
    • Check if alarms is not suspended
    • Check if any actions is not suspended
• Rulettes for
  • Triggers – Total number of evaluations against the rule itself
    • Ensure the rule is actually evaluating.  Increase counts from incoming data means the rule is processing
  • Fired – Number of actions triggered to due to the rule condition met
    • Increments to this count mean a severity condition has been met.
  • Hit – Total evaluations for any severity (including normal) calculated to true
  • Miss – Total sum of severity evaluations calculated as false

If the above Rule Diagnostic shows normal operation, the second step would be to review the rule itself

Dashboards| Administration| Rules & Notifications| Rules| rule name| view and edit| rule editor

• Check the Rule Definition  tab
  • Make note of the Rule scope (what Topology type is the rule scoped)
• Check the Conditions, Alarms & Actions tab
  • Select any severity
    • Make note of the metric (##)
    • Make note of the registry [registry(“”)]
    • Make note of the condition
      example: #utilization # >= registry("INF_MemoryUseCritical")

• Select the Run Condition Query drop down
  • Select scope object (Choose problem object)
    • Insert only the metric
      • If there is an error, then there’s an issue with collection
      • If data appears then move on to the next step (remember the metric name)
    • Insert the condition
      • If it resolves to true or false then all is well.
      • If there is an error, contact Foglight support
  • Next Step, if there is an error
    • Contact Foglight support with the following items in a doc file
      • Description of the issue
      • Insert supporting screenshots
      • Problem rule name
        • Is this an out of the box (OOTB) rule?
          • Has it been modified?
        • Is this a custom rule? 
        • Copy of a rule?
      • What is the rule scope?
      • What is the metric collected?
      • What is the sample condition query?