PingDirectory

Configuring an SLA object

Configure any number of SLA objects for monitored servers using the dsconfig command-line tool.

About this task

The service level agreement (SLA) object relies on existing performance metrics and only aggregates the data for specific SLAs. For more information, see the Ping Identity PingDataMetrics server Configuration Reference (HTML) documentation in the <server-root>/docs directory.

Steps

  1. Create a server query that specifies which servers will contribute to SLA monitoring.

    Example:

    This command specifies the PingDirectoryProxy servers located in Austin.

    $ bin/dsconfig create-server-query \
      --query-name "Austin Proxy Servers" \
      --set server-instance-type:proxy \
      --set server-instance-location:Austin
  2. Create a static-level monitoring threshold.

    Example:

    In this example, the alert condition is set to entry, which means that the server will generate an alert if the server enters a warning state (alert-on-warn:true and warn-if-above:12) or critical state (critical-if-above:15). When the server leaves its alerted state, an alert is generated (alertcondition: exit). The minimum amount of time that the threshold can be exceeded before an alert is generated is set to 15 seconds (min-time-for-trigger:15s).

    $ bin/dsconfig create-monitoring-threshold \
      --threshold-name "15ms response time" \
      --type static-level \
      --set alert-condition:entry \
      --set alert-condition:exit \
      --set alert-on-warn:true \
      --set min-time-for-trigger:15s \
      --set min-time-for-exit:15s \
      --set warn-if-above:12 \
      --set critical-if-above:15
  3. Create another static-level monitoring threshold.

    Example:

    For this example, the alert condition is set to entry. The server generates an alert if it enters a warning state (alert-on-warn:true and warn-if-above:4000) or critical state (critical-if-above:5000). When the server leaves its alerted state, an alert is generated (alertcondition:exit). The minimum amount of time that the threshold can be exceeded before an alert is generated is set to 15 seconds.

    $ bin/dsconfig create-monitoring-threshold \
      --threshold-name "5k ops/sec" \
      --type static-level \
      --set alert-condition:entry \
      --set alert-condition:exit \
      --set alert-on-warn:true \
      --set min-time-for-trigger:15s \
      --set min-time-for-exit:15s \
      --set warn-if-above:4000 \
      --set critical-if-above:5000
  4. Create an SLA object that targets a single sign-on (SSO) application and monitors the response and throughput times for LDAP bind operations.

    Example:

    The response time threshold is set to 15ms. The throughput threshold is set to 5k operations per second. The targeted servers are the set of PingDirectoryProxy servers, located in Austin.

    $ bin/dsconfig create-ldap-sla \
      --sla-name "SSO Application" \
      --set enabled:true \
      --set "application-name:SSO Application" \
      --set "response-time-threshold-ms:15ms response time" \
      --set "throughput-threshold-ops-per-second:5k ops/sec"
      --set ldap-op:bind \
      --set "sla-server-query:Austin Proxy Servers"