DOCUMENT DEPRECATED, see opCharts Dynamic Baseline and Threshold Tool

Why we need a Dynamic Baseline and Thresholding Tool

...

The delta baseline configuration then allows for defining the level of the event based on the percentage of change, for the defaults, this would result in a Major, you can see the configuration in the example below, this table is how to visualize the configuration.

If the change is below 10% the level will be normal, between 10% and 20% Minor, and so up to over 50% it will be considered fatal. 

In practicality this spike was brief and using the 15 minute threshold period (current is the average of the last 15 minutes) the value for calculating change would be 136 and the resulting change would be 36% so a Major event. The threshold period is dampening the spikes to remove brief changes and allow you to see changes which last longer.

Working with the Dynamic Baseline and Thresholding Tool

The Dynamic Baseline and Threshold Tool includes various configuration options so that you can tune the algorithm to learn differently depending on the metric being used.  The tool comes with several metrics already configured.  It is a requirement of the system that the stats modeling is completed for the metric you require to be baseline, this is how the NMIS API extracts statistical information from the performance database.

Dynamic Baseline Configuration Options

Configuration of the baseline tool is done in the file /usr/local/omk/conf/Baseline.nmis the default configuration should be installed when the tool is installed.

...

Installing the Baseline Tool

Copy the file to the server and do the following, upgrading will be the same process.

tar xvf Baseline-X.Y.tgz 
cd Baseline/
sudo ./install_baseline.sh

Working with the Dynamic Baseline and Thresholding Tool

The Dynamic Baseline and Threshold Tool includes various configuration options so that you can tune the algorithm to learn differently depending on the metric being used.  The tool comes with several metrics already configured.  It is a requirement of the system that the stats modeling is completed for the metric you require to be baseline, this is how the NMIS API extracts statistical information from the performance database.

Dynamic Baseline Configuration Options

Configuration of the baseline tool is done in the file /usr/local/omk/conf/Baseline.nmis the default configuration should be installed when the tool is installed.

Same-Day Dynamic Baseline Configuration Example

Here is what the configuration file would look like, this example is a Same-Day Baseline:

  'RouteNumber' => {
    'active' => 'true',
    'metric' => 'RouteNumber',
    'type' => 'RouteNumber',
    'nodeModel' => 'CiscoRouter',
    'event' => 'Proactive Route Number Change',
    'indexed' => 'false',
    'threshold_exceeds' => undef,
    'threshold_period' => "-5 minutes",
    'multiplier' => 1,
    'weeks' => 0,
    'hours' => 8,
  },

Multi-Day Dynamic Baseline Configuration Example

Another configuration option using the BGP Prefixes being exchanged with BGP peers, is from systemHealth modelling and this is a multi-day baseline:

  'cbgpAcceptedPrefix

...

Same-Day Dynamic Baseline Configuration Example

Here is what the configuration file would look like, this example is a Same-Day Baseline:

  'RouteNumber' => {
    'active' => 'true',
    'metric' => 'RouteNumbercbgpAcceptedPrefix',
    'type' => 'RouteNumberbgpPrefix',
    'nodeModelsection' => 'CiscoRouterbgpPrefix',
    'eventnodeModel' => 'Proactive Route Number ChangeCircuitMonitor|CiscoRouter',
    'indexedevent' => 'false',
Proactive BGP Peer Prefix 'threshold_exceeds' => undefChange',
    'threshold_periodindexed' => "-5 minutes"'true',
    'multiplier' => 1,
    'weeks' => 04,
    'hours' => 81,
  },

...

Delta Baseline Configuration Example

Another configuration option using the BGP Prefixes being exchanged with BGP peers, is from systemHealth modelling and this is a multi-day baseline:Currently delta baselines do not support multi-day, but the hours value can be very large if required.

  'cbgpAcceptedPrefixhrSystemProcesses' => {
    'baseline' => 'delta',
    'active' => 'true',
    'metric' => 'cbgpAcceptedPrefix'hrSystemProcesses',
    'type' => 'Host_Health',
    'nodeModel' => 'net-snmp',
    'typeindexed' => 'bgpPrefixfalse',
    'sectionhours' => 'bgpPrefix'4,
    'nodeModelthreshold_period' => 'CircuitMonitor|CiscoRouter'"-15 minutes",
    'eventlevels' => 'Proactive BGP Peer Prefix Change'{
      'Warning' => 10,
      'indexedMinor' => 'true',
20,
      'multiplierMajor' => 130,
      'weeksCritical' => 440,
      'hoursFatal' => 1,50
    }
  },

Delta Baseline for Output Packets Discarded Configuration Example

Currently delta baselines do not support multi-day, but the hours value can be very large if required.

  'ifOutDiscards' => {
    'baseline' => 'delta',
    'hrSystemProcessesactive' => {'true',
    'baselinemetric' => 'deltaifOutDiscards',
    'activetype' => 'truepkts_hc',
    'metricuse_index' => 'hrSystemProcessesinterface',
    'typenodeModel' => 'Host_HealthCiscoRouter',
    'nodeModelevent' => 'net-snmpProactive Output Discards (Delta)',
    'indexed' => 'falsetrue',
    'hours' => 41,
    'threshold_period' => "-15 minutes",
    'levels' => {
      'Warning' => 101,
      'Minor' => 202,
      'Major' => 303,
      'Critical' => 404,
      'Fatal' => 507
    }
  },

Running the Baseline Tool

...