{"version":21,"variables":[],"annotations":[],"tiles":{"100":{"title":"","type":"data","query":"data record(a=\"SERVICE HEALTH\")","visualization":"singleValue","visualizationSettings":{"singleValue":{"labelMode":"none","label":"a","recordField":"a","prefixIcon":"HeartbeatIcon","colorThresholdTarget":"background","trend":{"isVisible":true}},"coloring":{"colorRules":[{"value":"0","comparator":"!=","field":"a","colorMode":"custom-color","customColor":{"Default":"var(--dt-colors-charts-categorical-color-01-default, #134fc9)"}}]}},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"101":{"title":"Services (Current Health Status)","description":"Honeycomb view of all monitored services coloured by active Davis problem status. Green = Healthy, Red = Problem.","type":"data","query":"fetch dt.entity.service\n| lookup [\n  fetch dt.davis.problems\n  | filter event.status == \"ACTIVE\"\n  | expand affected_entity_ids\n], sourceField:id, lookupField:affected_entity_ids\n| fieldsAdd affected = if(isNotNull(lookup.affected_entity_ids), \"Problem\", else: \"Healthy\")\n| fields affected,\n         id,\n         entity.name,\n         event.id = lookup.event.id,\n         event.kind = lookup.event.kind\n| sort affected desc","visualization":"honeycomb","visualizationSettings":{"honeycomb":{"legend":{"hidden":true},"dataMappings":{"value":"affected"},"displayedFields":["entity.name"]},"coloring":{"colorRules":[{"colorMode":"custom-color","customColor":{"Default":"var(--dt-colors-charts-loglevel-emergency-default, #ae132d)"},"field":"affected","value":"Problem","comparator":"="},{"colorMode":"custom-color","customColor":"#0D9C29","field":"affected","value":"Healthy","comparator":"="}]},"autoSelectVisualization":false},"querySettings":{"maxResultRecords":2000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":1,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"102":{"title":"Active Problems","description":"List of all active Davis problems with severity, affected entities, root cause, and start time.","type":"data","query":"fetch dt.davis.problems\n| filter dt.davis.is_duplicate == false\n| sort timestamp desc\n| expand affected_entity_ids\n| lookup [fetch dt.entity.service],        sourceField:affected_entity_ids, lookupField:id, prefix:\"lookup.affected.entity.services\"\n| lookup [fetch dt.entity.host],           sourceField:affected_entity_ids, lookupField:id, prefix:\"lookup.affected.entity.hosts\"\n| lookup [fetch dt.entity.cloud_application], sourceField:affected_entity_ids, lookupField:id, prefix:\"lookup.affected.entity.cloudapplication\"\n| lookup [fetch dt.entity.kubernetes_cluster], sourceField:affected_entity_ids, lookupField:id, prefix:\"lookup.affected.entity.kubernetescluster\"\n| lookup [fetch dt.entity.process_group_instance], sourceField:affected_entity_ids, lookupField:id, prefix:\"lookup.affected.entity.pgi\"\n| summarize {\n    startTime            = takeFirst(event.start),\n    endTime              = takeFirst(event.end),\n    problemClosedDuration = takeFirst(resolved_problem_duration),\n    status               = takeFirst(event.status),\n    event.name           = takeFirst(event.name),\n    severityLevel        = takeFirst(event.category),\n    rootCause            = takeFirst(root_cause_entity_name),\n    dt.davis.is_duplicate = takeFirst(dt.davis.is_duplicate),\n    affectedServices     = collectDistinct(lookup.affected.entity.servicesentity.name),\n    affectedHosts        = collectDistinct(lookup.affected.entity.hostsentity.name),\n    affectedCloudApplication = collectDistinct(lookup.affected.entity.cloudapplicationentity.name),\n    affectedKubernetesCluster = collectDistinct(lookup.affected.entity.kubernetesclusterentity.name),\n    affectedPGI          = collectDistinct(lookup.affected.entity.pgientity.name),\n    event.id             = takeFirst(event.id)\n  },\n  by: {display_id, event.kind}\n| fieldsAdd currentTime = toTimestamp(now())\n| fieldsAdd Description = concat(display_id, \" - \", event.name)\n| fields Status      = status,\n         Description,\n         Severity     = severityLevel,\n         RootCause    = if(isNotNull(rootCause), rootCause, else:\"\"),\n         Affected     = arrayRemoveNulls(arrayConcat(affectedServices, affectedHosts, affectedCloudApplication, affectedKubernetesCluster, affectedPGI)),\n         StartTime    = startTime,\n         EndTime      = if((status == \"ACTIVE\"), \"In Progress\", else: if((status == \"CLOSED\"), endTime)),\n         Duration     = if((status == \"CLOSED\"), problemClosedDuration, else: if((status == \"ACTIVE\"), currentTime - startTime)),\n         event.id,\n         event.kind\n| sort StartTime, direction:\"descending\"\n| sort Status,    direction:\"ascending\"\n| limit 1000","visualization":"table","visualizationSettings":{"table":{"hiddenColumns":[["event.id"],["event.kind"]],"linewrapEnabled":true,"rowDensity":"default","lineWrapIds":[["Description"],["Affected"]]},"coloring":{"colorRules":[{"value":"CLOSED","comparator":"=","field":"Status","colorMode":"custom-color","customColor":"#0D9C29","metadata":{"applyTo":"cell","fields":["Status"]}},{"value":"ACTIVE","comparator":"=","field":"Status","colorMode":"custom-color","customColor":{"Default":"var(--dt-colors-charts-loglevel-emergency-default, #ae132d)"},"metadata":{"applyTo":"cell","fields":["Status"]}}]},"autoSelectVisualization":false,"unitsOverrides":[]},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"davisVisualization":{}}},"200":{"title":"","type":"data","query":"data record(a=\"SERVICE METRICS\")","visualization":"singleValue","visualizationSettings":{"singleValue":{"labelMode":"none","label":"a","recordField":"a","prefixIcon":"ServicesIcon","colorThresholdTarget":"background","trend":{"isVisible":true}},"coloring":{"colorRules":[{"value":"0","comparator":"!=","field":"a","colorMode":"custom-color","customColor":{"Default":"var(--dt-colors-charts-categorical-color-01-default, #134fc9)"}}]}},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"201":{"title":"Service - Request Rate","description":"Total number of requests received per service over the selected timeframe.","type":"data","query":"timeseries requests = sum(dt.service.request.count),\n           by: {dt.entity.service}\n| fieldsAdd service.name = entityName(dt.entity.service)\n| fields timeframe,\n         interval,\n         service.name,\n         dt.entity.service,\n         requests\n| sort arraySum(requests) desc\n| limit 100","visualization":"lineChart","visualizationSettings":{"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"Request count"},"xAxisLabel":"timeframe","xAxisScaling":"analyzedTimeframe","fieldMapping":{"leftAxisValues":["requests"],"timestamp":"timeframe"},"gapPolicy":"connect"},"dataMapping":{"displayedFields":["service.name"]},"autoSelectVisualization":true,"unitsOverrides":[]},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"202":{"title":"Service - Latency p50 / p90 / p99","description":"Server-side response time percentiles (p50, p90, p99) in microseconds per service. High p99 relative to p50 indicates tail latency issues.","type":"data","query":"timeseries latency_p50 = percentile(dt.service.request.response_time, 50),\n           latency_p90 = percentile(dt.service.request.response_time, 90),\n           latency_p99 = percentile(dt.service.request.response_time, 99),\n           by: {dt.entity.service}\n| fieldsAdd service.name = entityName(dt.entity.service)\n| fields timeframe,\n         interval,\n         service.name,\n         dt.entity.service,\n         latency_p50,\n         latency_p90,\n         latency_p99\n| sort arrayAvg(latency_p99) desc\n| limit 100","visualization":"lineChart","visualizationSettings":{"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"Response time (µs)"},"xAxisLabel":"timeframe","xAxisScaling":"analyzedTimeframe","fieldMapping":{"leftAxisValues":["latency_p50","latency_p90","latency_p99"],"timestamp":"timeframe"},"gapPolicy":"connect"},"dataMapping":{"displayedFields":["service.name"]},"autoSelectVisualization":true,"unitsOverrides":[{"identifier":"latency_p50","unitCategory":"time","baseUnit":"microsecond","displayUnit":null,"decimals":2,"suffix":"","delimiter":false,"added":1714406730982},{"identifier":"latency_p90","unitCategory":"time","baseUnit":"microsecond","displayUnit":null,"decimals":2,"suffix":"","delimiter":false,"added":1714406730983},{"identifier":"latency_p99","unitCategory":"time","baseUnit":"microsecond","displayUnit":null,"decimals":2,"suffix":"","delimiter":false,"added":1714406730984}]},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"203":{"title":"Service - Failure Rate %","description":"Percentage of failed requests out of total requests per service. A rising failure rate is a primary SRE alerting signal.","type":"data","query":"timeseries total = sum(dt.service.request.count, default:0),\n           nonempty: true,\n           by: {dt.entity.service}\n| lookup [\ntimeseries errors = sum(dt.service.request.failure_count, default:0),\n           nonempty: true,\n           by: {dt.entity.service}\n],\nsourceField:dt.entity.service, lookupField:dt.entity.service, prefix:\"request.\"\n| fieldsAdd failureRate = request.errors[] / total[] * 100\n| fieldsAdd service.name = entityName(dt.entity.service)\n| fields timeframe,\n         interval,\n         service.name,\n         dt.entity.service,\n         failureRate\n| sort arrayAvg(failureRate) desc\n| limit 100","visualization":"lineChart","visualizationSettings":{"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"Failure Rate (%)"},"xAxisLabel":"timeframe","xAxisScaling":"analyzedTimeframe","fieldMapping":{"leftAxisValues":["failureRate"],"timestamp":"timeframe"},"gapPolicy":"connect"},"dataMapping":{"displayedFields":["service.name"]},"coloring":{"colorRules":[{"field":"DT.name","comparator":"= *value*","value":"","type":"string","colorMode":"color-palette","colorPalette":"log-level"}]},"autoSelectVisualization":true,"unitsOverrides":[{"identifier":"failureRate","unitCategory":"percentage","baseUnit":"percent","displayUnit":null,"decimals":2,"suffix":"","delimiter":false,"added":1744594771432}]},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"204":{"title":"Service - HTTP 5xx Errors","description":"Count of HTTP 5xx server-side errors per service. These directly indicate service availability degradation.","type":"data","query":"timeseries errors = sum(dt.service.request.count, default:0),\n           nonempty: true,\n           by: {dt.entity.service},\n           filter:\n           http.response.status_code >= 500 and http.response.status_code <= 599\n| fieldsAdd service.name = entityName(dt.entity.service)\n| fields timeframe,\n         interval,\n         service.name,\n         dt.entity.service,\n         errors\n| sort arraySum(errors) desc\n| limit 100","visualization":"lineChart","visualizationSettings":{"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"5xx Error count"},"xAxisLabel":"timeframe","xAxisScaling":"analyzedTimeframe","fieldMapping":{"leftAxisValues":["errors"],"timestamp":"timeframe"},"gapPolicy":"connect"},"dataMapping":{"displayedFields":["service.name"]},"coloring":{"colorRules":[{"field":"DT.name","comparator":"= *value*","value":"","type":"string","colorMode":"color-palette","colorPalette":"log-level"}]},"autoSelectVisualization":true},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"205":{"title":"Service - HTTP 4xx Errors","description":"Count of HTTP 4xx client-side errors per service. Spikes can indicate authentication issues, bad deployments, or abuse.","type":"data","query":"timeseries errors = sum(dt.service.request.count, default:0),\n           nonempty: true,\n           by: {dt.entity.service},\n           filter:\n           http.response.status_code >= 400 and http.response.status_code <= 499\n| fieldsAdd service.name = entityName(dt.entity.service)\n| fields timeframe,\n         interval,\n         service.name,\n         dt.entity.service,\n         errors\n| sort arraySum(errors) desc\n| limit 100","visualization":"lineChart","visualizationSettings":{"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"4xx Error count"},"xAxisLabel":"timeframe","xAxisScaling":"analyzedTimeframe","fieldMapping":{"leftAxisValues":["errors"],"timestamp":"timeframe"},"gapPolicy":"connect"},"dataMapping":{"displayedFields":["service.name"]},"coloring":{"colorRules":[{"field":"DT.name","comparator":"= *value*","value":"","type":"string","colorMode":"color-palette","colorPalette":"log-level"}]},"autoSelectVisualization":true},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"206":{"title":"Service - Requests by Status Code","description":"Breakdown of all requests by HTTP status code, shown as a relative bar chart to identify traffic distribution changes.","type":"data","query":"timeseries requests = sum(dt.service.request.count),\n           by: {http.response.status_code}\n| fields timeframe,\n         interval,\n         http.response.status_code,\n         requests\n| sort http.response.status_code asc\n| limit 100","visualization":"barChart","visualizationSettings":{"dataMapping":{"displayedFields":["http.response.status_code"]},"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"Request count"},"xAxisLabel":"timeframe","xAxisScaling":"analyzedTimeframe","valueRepresentation":"relative","fieldMapping":{"leftAxisValues":["requests"],"timestamp":"timeframe"}},"coloring":{"colorRules":[{"field":"DT.name","comparator":"= *value*","value":"","type":"string","colorMode":"color-palette","colorPalette":"categorical"},{"colorMode":"custom-color","type":"string","field":"DT.name","comparator":"=","customColor":"#0D9C29","value":"200"},{"colorMode":"custom-color","type":"string","field":"DT.name","comparator":"=","customColor":{"Default":"var(--dt-colors-charts-categorical-color-01-default, #134fc9)"},"value":"201"},{"colorMode":"custom-color","type":"string","field":"DT.name","comparator":"=","customColor":{"Default":"var(--dt-colors-charts-categorical-color-11-default, #627cfe)"},"value":"204"},{"colorMode":"custom-color","type":"string","field":"DT.name","comparator":"=","customColor":{"Default":"var(--dt-colors-charts-categorical-color-14-default, #d56b1a)"},"value":"403"},{"colorMode":"custom-color","type":"string","field":"DT.name","comparator":"=","customColor":{"Default":"var(--dt-colors-charts-loglevel-emergency-default, #ae132d)"},"value":"500"}]},"autoSelectVisualization":false,"unitsOverrides":[]},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"300":{"title":"","type":"data","query":"data record(a=\"KUBERNETES\")","visualization":"singleValue","visualizationSettings":{"singleValue":{"labelMode":"none","label":"a","recordField":"a","prefixIcon":"KubernetesIcon","colorThresholdTarget":"background","trend":{"isVisible":true}},"coloring":{"colorRules":[{"value":"0","comparator":"!=","field":"a","colorMode":"custom-color","customColor":{"Default":"var(--dt-colors-charts-categorical-color-01-default, #134fc9)"}}]}},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"301":{"title":"K8s Nodes (Current Health Status)","description":"Honeycomb view of Kubernetes node health. Nodes with active Davis problems are shown in red. Uses entity_name as the sourceField for the lookup.","type":"data","query":"fetch dt.entity.kubernetes_node\n| fieldsAdd node.name = entity.name\n| lookup [\n  fetch dt.davis.problems\n  | filter event.status == \"ACTIVE\"\n  | expand affected_entity_ids\n], sourceField:entity.name, lookupField:affected_entity_ids\n| fieldsAdd status = if(isNotNull(lookup.affected_entity_ids), \"Problem\", else: \"Healthy\")\n| fields status,\n         id,\n         entity.name,\n         event.id = lookup.event.id\n| sort status desc","visualization":"honeycomb","visualizationSettings":{"honeycomb":{"legend":{"hidden":true},"dataMappings":{"value":"status"},"displayedFields":["entity.name"]},"coloring":{"colorRules":[{"colorMode":"custom-color","customColor":{"Default":"var(--dt-colors-charts-loglevel-emergency-default, #ae132d)"},"field":"status","value":"Problem","comparator":"="},{"colorMode":"custom-color","customColor":"#0D9C29","field":"status","value":"Healthy","comparator":"="}]},"autoSelectVisualization":false},"querySettings":{"maxResultRecords":2000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":1,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"302":{"title":"K8s Workload - CPU Usage","description":"Total CPU consumed by Kubernetes workload containers (user + system). Useful for capacity planning and detecting runaway workloads.","type":"data","query":"timeseries cpu = avg(dt.kubernetes.container.cpu_usage),\n           by: {k8s.namespace.name,\n                dt.entity.kubernetes_cluster,\n                dt.entity.cloud_application_namespace,\n                dt.entity.cloud_application}\n| fieldsAdd workload = entityName(dt.entity.cloud_application)\n| fields timeframe,\n         interval,\n         workload,\n         cpu,\n         dt.entity.cloud_application,\n         k8s.namespace.name,\n         dt.entity.cloud_application_namespace,\n         dt.entity.kubernetes_cluster\n| sort arrayAvg(cpu) desc\n| limit 20","visualization":"lineChart","visualizationSettings":{"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"Container CPU usage"},"xAxisLabel":"timeframe","xAxisScaling":"analyzedTimeframe","fieldMapping":{"leftAxisValues":["cpu"],"timestamp":"timeframe"}},"dataMapping":{"displayedFields":["workload","k8s.namespace.name"]},"autoSelectVisualization":true},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":1,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"303":{"title":"K8s Workload - Memory Working Set vs Limits","description":"Memory working set (non-reclaimable memory) versus configured memory limits per workload container. Approaching limits risks OOMKill events.","type":"data","query":"timeseries memory = avg(dt.kubernetes.container.memory_working_set),\n           limits  = avg(dt.kubernetes.container.limits_memory),\n           by: {k8s.namespace.name,\n                dt.entity.kubernetes_cluster,\n                dt.entity.cloud_application_namespace,\n                dt.entity.cloud_application}\n| fieldsAdd workload = entityName(dt.entity.cloud_application)\n| fields timeframe,\n         interval,\n         workload,\n         memory,\n         limits,\n         dt.entity.cloud_application,\n         k8s.namespace.name,\n         dt.entity.cloud_application_namespace,\n         dt.entity.kubernetes_cluster\n| sort arrayAvg(memory) desc\n| limit 50","visualization":"lineChart","visualizationSettings":{"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"Memory (bytes)"},"xAxisLabel":"timeframe","xAxisScaling":"analyzedTimeframe","fieldMapping":{"leftAxisValues":["memory","limits"],"timestamp":"timeframe"}},"dataMapping":{"displayedFields":["workload","k8s.namespace.name","memory","limits"]},"autoSelectVisualization":true},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":1,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"304":{"title":"K8s - Pod Restart Count","description":"Number of container restarts per workload pod. Frequent restarts indicate CrashLoopBackOff, OOMKill, or liveness probe failures.","type":"data","query":"timeseries restarts = sum(dt.kubernetes.container.restarts),\n           by: {k8s.namespace.name,\n                dt.entity.cloud_application_namespace,\n                dt.entity.cloud_application,\n                k8s.pod.name}\n| fieldsAdd workload = entityName(dt.entity.cloud_application)\n| fields timeframe,\n         interval,\n         workload,\n         k8s.pod.name,\n         k8s.namespace.name,\n         restarts\n| sort arraySum(restarts) desc\n| limit 50","visualization":"lineChart","visualizationSettings":{"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"Container restarts"},"xAxisLabel":"timeframe","xAxisScaling":"analyzedTimeframe","fieldMapping":{"leftAxisValues":["restarts"],"timestamp":"timeframe"},"gapPolicy":"connect"},"dataMapping":{"displayedFields":["workload","k8s.pod.name","k8s.namespace.name"]},"coloring":{"colorRules":[{"field":"DT.name","comparator":"= *value*","value":"","type":"string","colorMode":"color-palette","colorPalette":"log-level"}]},"autoSelectVisualization":true},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"400":{"title":"","type":"data","query":"data record(a=\"INFRASTRUCTURE\")","visualization":"singleValue","visualizationSettings":{"singleValue":{"labelMode":"none","label":"a","recordField":"a","prefixIcon":"ServerIcon","colorThresholdTarget":"background","trend":{"isVisible":true}},"coloring":{"colorRules":[{"value":"0","comparator":"!=","field":"a","colorMode":"custom-color","customColor":{"Default":"var(--dt-colors-charts-categorical-color-01-default, #134fc9)"}}]}},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"401":{"title":"Hosts (Current Health Status)","description":"Honeycomb view of all monitored hosts. Red tiles indicate an active Davis problem on that host.","type":"data","query":"fetch dt.entity.host\n| lookup [\n  fetch dt.davis.problems\n  | filter event.status == \"ACTIVE\"\n  | expand affected_entity_ids\n], sourceField:id, lookupField:affected_entity_ids\n| fieldsAdd status = if(isNotNull(lookup.affected_entity_ids), \"Problem\", else: \"Healthy\")\n| fields status,\n         id,\n         entity.name,\n         event.id = lookup.event.id\n| sort status desc","visualization":"honeycomb","visualizationSettings":{"honeycomb":{"legend":{"hidden":true},"dataMappings":{"value":"status"},"displayedFields":["entity.name"]},"coloring":{"colorRules":[{"colorMode":"custom-color","customColor":{"Default":"var(--dt-colors-charts-loglevel-emergency-default, #ae132d)"},"field":"status","value":"Problem","comparator":"="},{"colorMode":"custom-color","customColor":"#0D9C29","field":"status","value":"Healthy","comparator":"="}]},"autoSelectVisualization":false},"querySettings":{"maxResultRecords":2000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":1,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"402":{"title":"Host - CPU Usage %","description":"Average CPU utilisation per host. Sustained high CPU usage above 80% is a key SRE capacity signal.","type":"data","query":"timeseries cpu = avg(dt.host.cpu.usage),\n           by: {dt.entity.host}\n| fieldsAdd host.name = entityName(dt.entity.host)\n| fields timeframe,\n         interval,\n         host.name,\n         dt.entity.host,\n         cpu\n| sort arrayAvg(cpu) desc\n| limit 100","visualization":"lineChart","visualizationSettings":{"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"Host CPU usage (%)"},"xAxisLabel":"timeframe","xAxisScaling":"analyzedTimeframe","fieldMapping":{"leftAxisValues":["cpu"],"timestamp":"timeframe"},"gapPolicy":"connect"},"dataMapping":{"displayedFields":["host.name"]},"autoSelectVisualization":true,"unitsOverrides":[{"identifier":"cpu","unitCategory":"percentage","baseUnit":"percent","displayUnit":null,"decimals":2,"suffix":"","delimiter":false,"added":1714406692260}]},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"403":{"title":"Host - Memory Usage %","description":"Average memory utilisation per host as a percentage of total available memory. High values may lead to OOM conditions.","type":"data","query":"timeseries memory = avg(dt.host.memory.usage),\n           by: {dt.entity.host}\n| fieldsAdd host.name = entityName(dt.entity.host)\n| fields timeframe,\n         interval,\n         host.name,\n         dt.entity.host,\n         memory\n| sort arrayAvg(memory) desc\n| limit 100","visualization":"lineChart","visualizationSettings":{"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"Host memory usage (%)"},"xAxisLabel":"timeframe","xAxisScaling":"analyzedTimeframe","fieldMapping":{"leftAxisValues":["memory"],"timestamp":"timeframe"},"gapPolicy":"connect"},"dataMapping":{"displayedFields":["host.name"]},"autoSelectVisualization":true,"unitsOverrides":[{"identifier":"memory","unitCategory":"percentage","baseUnit":"percent","displayUnit":null,"decimals":2,"suffix":"","delimiter":false,"added":1714406692261}]},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"404":{"title":"Host - Network Bytes Received (RX)","description":"Average inbound network throughput per host NIC. A sudden spike or drop can indicate a DDoS event or network partition.","type":"data","query":"timeseries bytes_rx = avg(dt.host.net.nic.bytes_rx),\n           by: {dt.entity.host, dt.host.net.nic.name}\n| fieldsAdd host.name = entityName(dt.entity.host)\n| fields timeframe,\n         interval,\n         host.name,\n         dt.entity.host,\n         dt.host.net.nic.name,\n         bytes_rx\n| sort arrayAvg(bytes_rx) desc\n| limit 100","visualization":"lineChart","visualizationSettings":{"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"Network RX (bytes/s)"},"xAxisLabel":"timeframe","xAxisScaling":"analyzedTimeframe","fieldMapping":{"leftAxisValues":["bytes_rx"],"timestamp":"timeframe"},"gapPolicy":"connect"},"dataMapping":{"displayedFields":["host.name","dt.host.net.nic.name"]},"autoSelectVisualization":true,"unitsOverrides":[{"identifier":"bytes_rx","unitCategory":"data","baseUnit":"byte","displayUnit":null,"decimals":2,"suffix":"","delimiter":false,"added":1714406692262}]},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"405":{"title":"Host - Network Bytes Transmitted (TX)","description":"Average outbound network throughput per host NIC. Correlated with RX to detect asymmetric traffic patterns or upstream failures.","type":"data","query":"timeseries bytes_tx = avg(dt.host.net.nic.bytes_tx),\n           by: {dt.entity.host, dt.host.net.nic.name}\n| fieldsAdd host.name = entityName(dt.entity.host)\n| fields timeframe,\n         interval,\n         host.name,\n         dt.entity.host,\n         dt.host.net.nic.name,\n         bytes_tx\n| sort arrayAvg(bytes_tx) desc\n| limit 100","visualization":"lineChart","visualizationSettings":{"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"Network TX (bytes/s)"},"xAxisLabel":"timeframe","xAxisScaling":"analyzedTimeframe","fieldMapping":{"leftAxisValues":["bytes_tx"],"timestamp":"timeframe"},"gapPolicy":"connect"},"dataMapping":{"displayedFields":["host.name","dt.host.net.nic.name"]},"autoSelectVisualization":true,"unitsOverrides":[{"identifier":"bytes_tx","unitCategory":"data","baseUnit":"byte","displayUnit":null,"decimals":2,"suffix":"","delimiter":false,"added":1714406692263}]},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"406":{"title":"Process - CPU Usage %","description":"CPU usage per process group instance across all monitored hosts. Helps correlate host-level CPU spikes to specific processes.","type":"data","query":"timeseries cpu = avg(dt.process.cpu.usage),\n           by: {dt.entity.process_group_instance,\n                dt.entity.host}\n| fieldsAdd pgi = entityName(dt.entity.process_group_instance)\n| fieldsAdd host.name = entityName(dt.entity.host)\n| fields timeframe,\n         interval,\n         pgi,\n         dt.entity.process_group_instance,\n         host.name,\n         cpu\n| sort arrayAvg(cpu) desc\n| limit 100","visualization":"lineChart","visualizationSettings":{"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"Process CPU usage (%)"},"xAxisLabel":"timeframe","xAxisScaling":"analyzedTimeframe","fieldMapping":{"leftAxisValues":["cpu"],"timestamp":"timeframe"},"gapPolicy":"connect"},"dataMapping":{"displayedFields":["pgi","host.name"]},"autoSelectVisualization":true},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"407":{"title":"Process - Memory Usage %","description":"Memory utilisation per process group instance. Memory leaks and high consumers are visible here before host-level thresholds are breached.","type":"data","query":"timeseries memory = avg(dt.process.memory.usage),\n           by: {dt.entity.process_group_instance,\n                dt.entity.host}\n| fieldsAdd pgi = entityName(dt.entity.process_group_instance)\n| fieldsAdd host.name = entityName(dt.entity.host)\n| fields timeframe,\n         interval,\n         pgi,\n         dt.entity.process_group_instance,\n         host.name,\n         memory\n| sort arrayAvg(memory) desc\n| limit 100","visualization":"lineChart","visualizationSettings":{"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"Process memory usage (%)"},"xAxisLabel":"timeframe","xAxisScaling":"analyzedTimeframe","fieldMapping":{"leftAxisValues":["memory"],"timestamp":"timeframe"},"gapPolicy":"connect"},"dataMapping":{"displayedFields":["pgi","host.name"]},"autoSelectVisualization":true},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"500":{"title":"","type":"data","query":"data record(a=\"LOGS\")","visualization":"singleValue","visualizationSettings":{"singleValue":{"labelMode":"none","label":"a","recordField":"a","prefixIcon":"LogsIcon","colorThresholdTarget":"background","trend":{"isVisible":true}},"coloring":{"colorRules":[{"value":"0","comparator":"!=","field":"a","colorMode":"custom-color","customColor":{"Default":"var(--dt-colors-charts-categorical-color-01-default, #134fc9)"}}]}},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"501":{"title":"Log Error Rate Over Time","description":"Count of ERROR-level log events over time. A sharp increase in error logs is a leading indicator of service degradation before metrics breach thresholds.","type":"data","query":"fetch logs\n| filter status == \"ERROR\"\n| summarize errorCount = count(), by: {bin(timestamp, 1m)}\n| fields timestamp, errorCount\n| sort timestamp asc","visualization":"lineChart","visualizationSettings":{"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"Error log count"},"xAxisLabel":"timestamp","xAxisScaling":"analyzedTimeframe","fieldMapping":{"leftAxisValues":["errorCount"],"timestamp":"timestamp"},"gapPolicy":"connect"},"coloring":{"colorRules":[{"field":"DT.name","comparator":"= *value*","value":"","type":"string","colorMode":"color-palette","colorPalette":"log-level"}]},"autoSelectVisualization":true,"unitsOverrides":[]},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"502":{"title":"Log Volume by Severity","description":"Log event volume broken down by severity level (INFO, WARN, ERROR, CRITICAL) as a relative stacked bar chart. Helps identify anomalous log volume shifts.","type":"data","query":"fetch logs\n| summarize logCount = count(), by: {bin(timestamp, 5m), status}\n| fields timestamp, status, logCount\n| sort timestamp asc","visualization":"barChart","visualizationSettings":{"dataMapping":{"displayedFields":["status"]},"chartSettings":{"truncationMode":"middle","legend":{"hidden":true},"leftYAxisSettings":{"label":"Log count"},"xAxisLabel":"timestamp","xAxisScaling":"analyzedTimeframe","valueRepresentation":"relative","fieldMapping":{"leftAxisValues":["logCount"],"timestamp":"timestamp"}},"coloring":{"colorRules":[{"field":"DT.name","comparator":"= *value*","value":"","type":"string","colorMode":"color-palette","colorPalette":"categorical"},{"colorMode":"custom-color","type":"string","field":"DT.name","comparator":"=","customColor":"#0D9C29","value":"INFO"},{"colorMode":"custom-color","type":"string","field":"DT.name","comparator":"=","customColor":{"Default":"var(--dt-colors-charts-categorical-color-14-default, #d56b1a)"},"value":"WARN"},{"colorMode":"custom-color","type":"string","field":"DT.name","comparator":"=","customColor":{"Default":"var(--dt-colors-charts-loglevel-emergency-default, #ae132d)"},"value":"ERROR"}]},"autoSelectVisualization":false,"unitsOverrides":[]},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"503":{"title":"Top Error Log Sources","description":"Services and process groups generating the highest volume of ERROR log records. Directs attention to the noisiest failure sources during an incident.","type":"data","query":"fetch logs\n| filter status == \"ERROR\"\n| summarize errorCount = count(),\n  by: {dt.entity.service, dt.entity.process_group_instance}\n| fieldsAdd service.name = entityName(dt.entity.service)\n| fieldsAdd pgi.name     = entityName(dt.entity.process_group_instance)\n| fields service.name,\n         pgi.name,\n         errorCount\n| sort errorCount desc\n| limit 50","visualization":"table","visualizationSettings":{"table":{"rowDensity":"default"},"coloring":{"colorRules":[{"value":0,"comparator":"=","field":"errorCount","colorMode":"custom-color","customColor":"#0D9C29","metadata":{"applyTo":"cell","fields":["errorCount"]}}]},"autoSelectVisualization":false,"unitsOverrides":[]},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":100,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}}},"layouts":{"100":{"x":0,"y":0,"w":24,"h":1},"101":{"x":0,"y":1,"w":9,"h":4},"102":{"x":9,"y":1,"w":15,"h":4},"200":{"x":0,"y":5,"w":24,"h":1},"201":{"x":0,"y":6,"w":6,"h":4},"202":{"x":6,"y":6,"w":6,"h":4},"203":{"x":12,"y":6,"w":6,"h":4},"204":{"x":18,"y":6,"w":6,"h":4},"205":{"x":0,"y":10,"w":6,"h":4},"206":{"x":6,"y":10,"w":18,"h":4},"300":{"x":0,"y":14,"w":24,"h":1},"301":{"x":0,"y":15,"w":9,"h":4},"302":{"x":9,"y":15,"w":6,"h":4},"303":{"x":15,"y":15,"w":9,"h":4},"304":{"x":0,"y":19,"w":24,"h":4},"400":{"x":0,"y":23,"w":24,"h":1},"401":{"x":0,"y":24,"w":9,"h":4},"402":{"x":9,"y":24,"w":6,"h":4},"403":{"x":15,"y":24,"w":9,"h":4},"404":{"x":0,"y":28,"w":12,"h":4},"405":{"x":12,"y":28,"w":12,"h":4},"406":{"x":0,"y":32,"w":12,"h":4},"407":{"x":12,"y":32,"w":12,"h":4},"500":{"x":0,"y":36,"w":24,"h":1},"501":{"x":0,"y":37,"w":12,"h":4},"502":{"x":12,"y":37,"w":12,"h":4},"503":{"x":0,"y":41,"w":24,"h":4}},"settings":{"gridLayout":{"mode":"responsive"}},"importedWithCode":false}