I dont understand the Heartbeat graph

Question

I dont understand the Heartbeat graph

Goce Dimitroski 41

Here is the code

Heartbeat
| where TimeGenerated >= ago(48h)
| where Computer contains "###############"
| summarize count() by bin(TimeGenerated, 10m)
| render timechart

Here is the chart

This server is turn on at 6pm till 8pm.
I don't understand the value of 20 on the chart.
Also when the server is not on shouldn't it be a value of 0 ?

In SCOM it would be like 100% and goes to 0 when the server is not on.

Can someone shed some light on this please ?

Answer 1

Andrew Blumhardt 9,346 Microsoft Employee

It may help to look at the raw results for more insights.

The heartbeat is checked once per minute. If you have the AMA and MMA agents on the same system you will see up to 2 per minute. That could explain 20 records in 10 minutes.

Due to ingestion delays and other latency impacts the entries appear to jump 3-4 minutes periodically. You may need to modify your query to produce more consistent results. The following article may help.

http://contoso.se/blog/?p=4532

Thanks, Andrew

Goce Dimitroski 41 Reputation points

2022-03-30T21:01:36.143+00:00

Thank you for your reply.
" If you have the AMA and MMA agents on the same system you will see up to 2 per minute. "
I didn't know about that . But yes that explains a lot

I dont understand the Heartbeat graph

0 additional answers

Activity