Discovery Rule Engine

Discovery Rule Engine helps you automate the activities such as adding monitors to a device or adding a device to a business view that you carryout after adding the devices to OpManager. This helps you start monitoring the devices straightaway as soon as you add them and avoid repetitive manual effort.

How does Discovery Rule Engine Work?

The Discovery Rule Engine is condition/criteria based. During discovery, devices that satisfy the condition/criteria are associated with the actions specified in the Discovery Rule Engine.

Steps to add a Discovery Rule Engine

  1. Go to Settings -> Discovery -> Discovery Rule Engine and click on Add rule on the top right.
  2. Enter a Name and Description for the Discovery Rule Engine.
  3. Criteria refers to the parameter of the device which must be checked for applying the rule (Such as DNS Name / Category / Type...). Define the Criteria and select the Condition.
    Eg. Select Service Name as the Criteria and equals as the Condition, and enter the POP3Svc (POP3Svc is a MSExchange service. This is to verify whether the discovered device is an exchange server or not.)
  4. If required you can define multiple criteria, but have to select either AND or OR option.
    AND: Executes the action when all the defined criteria are satisfied.
    OR: Executes the actions when any one of the defined criteria is satisfied.
  5. Define the Actions. An Action refers to the process to be performed on a device if it satisfies the specified criteria.
    The following are the list of possible actions that can be performed by a Discovery rule Engine:
    • Associate a Process Monitor with the device
    • Associate a Service Monitor with the device
    • Associate a Windows NT Service Monitor with the device
    • Associate a File / Folder / Script Monitor with the device
    • Add the device to a Business View
    • Associate a URL Monitor with the device
    • Associate an Event Log Rule to the device
    • Associate MSSQL Monitors with the device
    • Associate Notification Profiles with the device
    • Associate Performance Monitors with the device. Learn more.
  6. Select the required action. You can add additional actions by clicking on the Add (+).
    Following are the list of actions that be performed on the created Discovery Rule.
    • Edit
    • Copy As
    • Enable/Disable
    • Delete
  7. Click on Save.
Discovery rule engine in OpManager: Rule addition

Re-running a Discovery Rule Engine

To re-run a rule on demand,
  1. Select the rule that you want to re-run.
  2. Click on the Re-run button.
  3. Select the devices on which you want to execute the rule.
  4. Click Run.

Discovery rule engine in OpManager: Device Selection

Associate Performance Monitors with the device

The Associate Performance Monitors action in the Discovery Rule Engine lets you automatically assign performance monitors to devices at the time of discovery. This removes the need to manually attach monitors to each device after it is added to OpManager.

When this action is configured in a rule, OpManager applies the selected performance monitors to every device that matches the rule's criteria at the time of discovery or when the rule is re-run.

Settings → Discovery → Discovery Rule Engine

Create a new rule, or edit an existing one where under Actions, you can find Associate Performance Monitors.

Perf monitors

Two Simple Ways to Associate Monitors:

Once you select this action, the Perf Monitors panel appears with two options:

  • Perf Group
  • Monitors

Perf Group

Associate performance monitors

With PerfGroup, you can associate a predefined group of monitors and OpManager automatically picks the applicable monitors from the group based on the device's template mapping and the monitoring protocol it supports.

Note: When a Perf Group contains multiple monitors of the same type, OpManager associates only the first monitor that meets the test criteria.

Monitors

Associate performance monitors

If a specific monitor you need is not included in the selected PerfGroup, you can add it individually using the Monitors option.

Note: The Monitors list only shows monitors that are not assigned to any PerfGroup. Monitors already covered by a PerfGroup do not appear here.

Both options can be used together in the same rule. However, the combined total of monitors selected across PerfGroup and Monitors must not exceed 15.

Configuring Thresholds

Without thresholds, a performance monitor collects data but raises no alarms, so problems can go unnoticed. Configuring thresholds at the rule level ensures every device matched by the rule is alarm-ready from the moment it is discovered. It also applies a consistent alerting standard across all devices of the same type, avoiding the need to set thresholds device by device.

Note: Threshold configuration is optional. If thresholds are configured here, they take precedence over any thresholds set at the device or template level, for all devices.

Click Edit Thresholds.

Edit threshold for performance monitors

Once you click Edit Thresholds, you can configure the following for each performance monitor:

Associate performance monitors

Once you click Edit Thresholds, you can configure the following for each performance monitor:

  • Interval: How frequently the metric is polled (e.g., every 15 minutes.
  • Data Type: The type of data collected, used to determine how threshold values are evaluated.
  • Attention: The threshold value at which an Attention severity alarm is raised.
  • Trouble: The threshold value at which a Trouble severity alarm is raised.
  • Critical: The threshold value at which a Critical severity alarm is raised.
  • Rearm: The value at which an active alarm is automatically cleared once the monitored metric returns to an acceptable level.
  • Consecutive Times: The number of back-to-back polling cycles the metric must breach the threshold before an alarm is raised. This prevents false alarms caused by momentary spikes.
  • Once configured, click Save.