Create a rule / alarm for older snapshot

Hi Alex

Yes, I'll try

Rule definition:

Only the Warning condition is enabled:

Condition

// Rule: vBundle-1 VM Snap Shot Age

// First - Check VM Ignore List

// Second - Check VM has Active Snap

// Third - Check Snapshot Age

// Read Ignore list from Registry

def IgnoreList = registry("vBundle.vm.snapshot.age.ignore.list");

// Get VM Name

def VMName1 = scope.get("name");

def boolean Found = false;

if (IgnoreList != null) {

  Found = IgnoreList.contains(VMName1);}

if (Found) return false;

// Check if VM has an active snapshot

if(scope.currentSnapshot == null){

  return false}

// Evaluate Snapshot Age

def NumOfDays = registry("vBundle.vm.snapshot.age.warning.days");

try { 

  creationTime= scope.currentSnapshot.get("creationTime").getTime();

  if (creationTime==null) return false;

  now = new Date().getTime();

  diffHours = (now - creationTime)/3600000;

  diffDays  = diffHours /24;

  if (diffDays >= NumOfDays)

   return true;

  else return false}

catch (Exception e) {return false;}

Alarm Message:

[Warning] Virtual Machine: "@VMName" Has a snapshot named: "@SnapshotName" that is older than @WarningDays days. Remove old snapshots.

There are no Severity Level Variables defined.

The Action is an EmailAction:

mail.message

VM (@VMName) has a snapshot that is @WarningDays Days Old

View the alarm at: @foglight_rule_alarm_link

mail.subject

[Warning] VM (@VMName) has an old Snapshot

Behavior:

Rule Variables:

Expression   CriticalDays  return registry ("vBundle.vm.snapshot.age.critical.days");

Expression   FatalDays     return registry ("vBundle.vm.snapshot.age.fatal.days");

Expression   SnapshotName  scope.currentSnapshot.name;

Expression   VMName        return scope.get("name");

Expression   WarningDays   return registry ("vBundle.vm.snapshot.age.warning.days");

Registry Settings:

vBundle.vm.snapshot.age.ignore.list

vBundle.vm.snapshot.age.warning.days

The OOTB warning days are 7 (warning), 14 (critical) and 30 (fatal).

I hope that's all clear for you

If you want the Critical and Fatal conditions, let me know.

Brian