Forum Discussion
Heratbeat alert missing
Is the goal to Alert when a heartbeat is missed in the past 5mins?
Heartbeat
| summarize LastCall = max(TimeGenerated) by Computer
| where LastCall < ago(5m)
//| project tMinus5 = ago(5m), LastCall, Computer
| count
- GouravINSep 30, 2019Brass Contributor
CliveWatson Somewhere yes or no, I am in dilemma to answer your question.
If you will check my question there you could see three columns for heartbeat data and this data in column one is good (means we have 60 heartbeat after 1 minute). But in next two columns you could see data is missing for one heartbeat (means we have 59 heartbeat in one hour and we missed one heartbeat).
So what i generally want is if any server miss any heartbeat, I should have alert for the same.
Since every server sends heartbeat after every minute as far as i know and read.
Or you could let me know any alert mechanism because my end goal to have a reboot and down alert for Windows and Linux (Similar like Heartbeat and Failed to connect in SCOM).
Thanks in advance for your support 🙂