Configure Entropy Generation Schedule
Moogsoft recommends that you perform an incremental run of the Alert Analyzer at 3 am every day, with a keep age of two weeks. This is the preset entropy generation schedule.
However, you can configure the Alert Analyzer to run as frequently as you want. If you want to change the entropy generation schedule, you have the following options:
Disable Entropy Generation
Clear the Enable Entropy Generation check box if you do not want to use entropy calculations at all. If you do this, Moogsoft Onprem will no longer remove any noisy alerts.
Change the preset entropy generation schedule
You can change to a custom entropy generation schedule. Moogsoft recommends that you do not change the preset entropy generation schedule.
Change the Preset Schedule Period if you want to change to an hourly or weekly run.
Clear the Use Schedule Preset check box if you want to set up a different, more complex, entropy generation schedule.
Add or update an Alert Analyzer run
To add an Alert Analyzer run, follow these steps:
Click Add Item at the bottom of the Configuration Events Analyser Execution Schedule. A new Entropy Generation Run window opens.
The Incremental Run check box is automatically selected. If you want to add a full run, clear this check box.
If you have selected an incremental run, the Keep Age Value and Keep Age Unit are set to 2 weeks. Moogsoft recommends that this is the optimum length of time for keeping entropy calculation data. All older data is deleted.
You can enter different values to keep more or less entropy calculation data. For example, if you select a Keep Age Value of "3" and selected the Keep Age Unit. as "Weeks", the Alert Analyzer keeps the last five weeks of entropy calculation data.
If you have selected a full run, the Read Age Value and the Read Age Unit are set to 2 weeks. Moogsoft recommends that this is the optimum amount of event data that you want to use in your entropy calculations.
You can enter different values to read more or less event data. For example, if you select a Read Age Value of "5" and selected the Read Age Unit. as "Weeks", the Alert Analyzer analyzes the last five weeks of alerts.
Select the Repeat This Run Every unit. The default is every day. If you select "Week", the Alert Analyzer runs every week.
Enter the time that you want to run the Alert Analyzer in the Run At Time field. If you have selected "Week" above, select the day of the week. If you have selected "Month", enter the day of the month.