I had no idea that was a possibility. I love the approach. Unfortunately, it doesn't seem to be working. I put your example (sans "DISK") in my analysis.cfg file just below the DEFAULT section and above the first HOST=... section. Then I ran three YouTube videos to force the load above 10% for a while. The alert went red.
Based on some online research, I added "CLASS:powershell" to the end of that host's line in hosts.cfg. Then I waited a bit over 5 minutes. The alert stayed red.
Is there a way to see what class a host is reporting in as?
Is there an easier way to see if the desired settings are applying to the host than waiting 5 minutes to see if the alarm changes?
Jaime Kikpole
Director of Technology & Innovations Cairo-Durham Central School District (518) 622-8543, x59500 cairodurham.org <http://www.cairodurham.org>
Technical Support: help at cairodurham.org go.cairodurham.org/techtips
[image: Google Certified Educator, Level 1] [image: Google Certified Educator, Level 2]
-- This electronic message and any attachment(s) may contain confidential or legally privileged information protected by law from further disclosure and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agency responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachment(s). Please notify the sender immediately by return email or telephone and permanently delete this message and attachment(s) from your system.