LogoLogo
LearnDocumentationSupportCommunity
Version 6.30
Version 6.30
  • Welcome
  • Nexthink V6
  • Overview
    • Software components
    • Collector
    • Finder
    • Engine
    • Portal
    • Nexthink Library
    • Digital Experience Score
  • Installation and configuration
    • Planning your installation
      • Overview of the installation process
      • Hardware requirements
      • Connectivity requirements
      • Software requirements
      • Reference architectures
    • Installing Portal and Engine Appliances
      • Installing the Appliance
      • Installing the Appliance on Azure
      • Installing the Appliance on AWS
      • Installing the Appliance on OTC
      • Managing Appliance accounts
      • Setting the names of the Portal
      • Setting the names of the Engines
      • Specifying your internal networks and domains
      • Federating your Appliances
      • STIG compliance in Web Console
      • Connecting the Portal to the Engines
      • Configuring session performance storage
      • Configuring device performance storage
      • Setting up a software license
      • Sending email notifications from the Appliance
      • Allocating resources for the Portal
    • Installing the Collector
      • Installing the Collector on Windows
      • Installing the Collector on macOS
      • Installing the Collector for a Proof of Value
      • Assigning Collectors to Engines
      • Assignment of roaming Collectors
      • Collector MSI parameters reference table
      • Nxtcfg - Collector configuration tool
      • Inspecting the connection status of the Collector
      • Querying the status of the TCP connection of the Collector
      • Reporting the URL of HTTP web requests
      • Auditing logon events
      • Viewing user interactions in virtualized and embedded environments
      • Engage notifications on macOS
      • Configuring Collector level anonymization
    • Collector remote connectivity
      • Redirecting and anonymizing Collector traffic
      • Redirecting the Collector TCP channel
      • Support for DirectAccess
      • Windows Collector proxy support
      • Mac Collector proxy support
    • Installing the Event Connector
      • Installing the Event Connector on Linux
    • Installing the Finder
      • Installing the Finder on Windows
      • Enabling Cross-Engine Finder features
      • Expanding the time frame of investigations in the Finder
      • Enabling Finder access to the Library
      • Finder proxy support
    • Updating from V6.x
      • Updating the Appliance
      • Content centralization when updating the Appliance
      • Updating the Collector
      • Viewing Collector deprecated fields
      • Updating the Finder
    • Security and user account management
      • Importing and replacing certificates
      • Hierarchizing your infrastructure
      • Adding users
      • Enabling SAML authentication of users
      • Just-In-Time provisioning of user accounts
      • Enabling Windows authentication of users
      • Multi-factor authentication for local accounts overview
      • Provisioning user accounts from Active Directory
      • Establishing a privacy policy
      • Disabling local accounts for interactive users
      • Setting the complexity and minimum length of passwords for local accounts
      • Protecting local accounts against brute force attacks
      • Preventing password saving in the Finder
      • Controlling session timeouts in the Portal
      • Security settings in the Appliance
      • Setting the Do Not Disturb periods between campaigns
    • Data retrieval and storage
      • Data retention
      • Increasing the maximum number of metrics
      • Establishing a data retention policy in the Engine
      • Storing Engine data in a secondary disk drive
      • Importing data from Microsoft Active Directory
      • Setting the locale in the Portal
      • Changing the Time Zone of the Portal
      • Time Zones and data collection
      • Changing the data collection time of the Portal
      • Nightly task schedules timetable
      • Changing the thresholds of High CPU warnings
      • Automatic restart of unresponsive Engine
    • Maintenance operations
      • Logging in to the CLI
      • Special operation modes for the Engine and the Portal
      • Changing the default ports in the Appliance
      • Centralized Management of Appliances and Engines
      • Monitoring the performance of the Appliance
      • Resizing partitions in Appliance
      • Configuring the system log
      • Examining the logs in the Portal
      • GDPR - Retrieving or anonymizing personal data
      • Finding out unlicensed devices
      • Removing devices
      • Installing third-party software in the Appliance
      • Installing VMware Tools in the Appliance
      • Operational data sent to Nexthink
      • Sending additional data to Support
    • Disaster recovery
      • Planning for disaster recovery
      • Web Console backup and restore
      • Engine backup and restore
      • Portal backup and restore
      • Rule-based assignment backup and restore
      • License backup and restore
      • PKI backup and restore
    • Branding
      • Branding the Portal
      • Branding of campaigns
  • User manual
    • Getting started
      • Logging in to the Finder
      • Logging in to the Portal
      • Enabling STIG in Webconsole
    • Querying the system
      • Searching the subject of interest
      • Executing an investigation
      • Creating an investigation
      • Editing the options of an investigation
      • Combining logical conditions in investigations
      • Navigating through the results of an investigation
      • Properties of users and devices
    • Visualizing system activity in the Finder
      • Getting a quick overview
      • Graphically observing the activity of users and devices
      • Observing service performance
      • Viewing network connections
      • Viewing web requests
      • Viewing executions
    • Monitoring IT custom metrics
      • Creating a metric
      • Examples of metrics
      • Session performance
      • Device performance
      • Following the evolution of a metric
      • Finding the visuals of a metric
    • Monitoring IT services
      • Analyzing service quality
      • Creating a service
      • Following the evolution of a service
      • Specifying URL paths of web-based services
    • Engaging with the end user
      • Getting feedback from the end users
      • Types of campaigns
      • Creating a campaign
      • Editing a campaign
      • Types of questions
      • Controlling the flow of questions
      • Translating a campaign
      • Triggering a campaign manually
      • Limiting the reception rate of campaigns
      • Scrutinizing the results of a campaign
      • Continuously measuring the satisfaction of employees
    • Rating devices and users with scores
      • Computing scores
      • Creating a score
      • Checking and comparing ratings
      • Computing potential savings
      • Score XML Reference
      • Documenting scores
    • Remotely acting on devices
      • Scenarios for remote actions
      • Creating a remote action
      • Executing remote actions
      • Triggering a remote action manually
      • Writing scripts for remote actions on Windows
      • Writing scripts for remote actions on Mac
      • Example of self-healing scenario
      • Example of self-help scenario
      • Application control and remote actions
    • Organizing objects with categories
      • Classifying objects of the same type
      • Creating categories and keywords
      • Tagging objects manually
      • Tagging objects automatically
      • Importing tags from text files
    • Getting notified by the system
      • Receiving Engage campaigns
      • Receiving email digests
      • Receiving alerts
      • Creating a service-based alert
      • Creating an investigation-based alert
    • Building web-based dashboards
      • Introducing dashboards in the Portal
      • Creating a dashboard
      • Examining metrics in depth
      • Documenting dashboards
      • Assessing license use
      • Computing dashboard data
      • Reusing dashboard content
    • Importing and exporting authored content
      • Methods for reusing authored content
      • Manually sharing Finder content
      • Importing a content pack
      • Conflict resolution
      • Exporting a content pack
  • Library packs
    • Compliance
      • Device Compliance
    • Configuration Manuals
      • Overview (Configuration Manuals)
      • Installing A New Version Of A Library Pack
    • Digital Employee Score (DEX score)
      • DEX Score Installation And Configuration
      • Detailed Library Pack Changelog
    • Device management
      • Reduce logon duration
      • Group Policy Management
      • Hardware Asset Renewal
      • Hardware Asset Renewal Advanced
      • Application Auto-Start Impact
    • Remote Employee Experience
      • Remote Worker Experience
      • Home Networking
      • Change Log And Upgrade Process
      • Remote Worker Vs Office Worker Device Category
      • Remote Worker Insights
      • DEX V2 Upgrade Of Remote Worker
    • Persona Insight
      • Persona Insight - Overview
      • Persona Insight - Library Pack
      • Persona Insight - Score Only Pack
      • Persona Insight - Without Campaign pack
      • Persona Insight - Getting Started and Upgrade Procedure
      • Persona Insight - Configuration Guide
      • Persona Insight - Troubleshooting - Multiple devices on multiple engines
      • Persona Insight - Reference Guide
      • Persona Insight - Example Pack
      • Persona Insight - Device Sizing
        • Persona Insight - Device Sizing Overview
        • Persona Insight - Device Sizing Configuration
      • Persona Insight - Application Sizing
        • Persona Insight - Application Sizing Overview
        • Persona Insight - Application Sizing Configuration
      • Legacy Persona documentation
        • Persona Insight - Library Pack (V.1.0.0.0)
        • Persona Insight - Base Pack
        • Persona Insight - Base Pack Advanced
        • Persona Insight - Customization Guide (V1.0.0.0)
        • Persona Insight - Configuration Guide (V1.0.0.0)
        • Persona Insight - Reference Guide (V1.0.0.0)
    • GSuite
      • GSuite: Health
      • GSuite: Services
      • GSuite: Sentiment
      • GSuite: Advanced Health
    • Support
      • Support: Level 1
    • Shadow IT
      • Shadow IT
    • Malware Protection
      • Malware Protection
    • Office 365 Health
      • Office 365 Health: Overview
      • Office 365 Health: Services
    • Office 365 OneDrive
      • OneDrive Summary
      • OneDrive Operations
      • OneDrive Advanced Health
      • OneDrive Migration
      • OneDrive Sentiment
      • OneDrive Management
      • OneDrive Advanced Operations
    • Office 365 Teams
      • Teams Overall Configuration
      • Teams - Migration
      • Teams - Health
      • Teams - Advanced Health
      • Teams - Adoption
    • Microsoft 365 Apps
      • Microsoft 365 Apps - Operate
    • Employee Self Service
      • Overview
      • Configuration
      • Usage
    • Onboarding Experience Management
      • OEM - Overview
      • OEM - Configuration
    • Office 365 Outlook
      • Outlook Troubleshooting
    • Virtualization
      • Virtualization: Operate
      • Virtualization: AVD - Advanced
      • Virtualization: Citrix Advanced
      • Virtualization: Project
      • Virtualization: Troubleshooting
        • Virtualization: Troubleshooting: Configuration
    • Windows
      • Win10: Configuration
      • Win10: Migration
      • Win10: Feature Update
      • Win10: Quality Update
      • Windows Defender Management
      • Administrators Management
    • Windows 11
      • Windows 11 - Readiness
      • Windows 11 - Migration Pilot
      • Windows 11 - Migration
      • Windows 11 - Operate
    • Webex
      • Webex Operate
    • Zoom
      • Zoom Operate
    • Remote Actions
      • Get Performance Monitor Data
      • Skype For Business
      • Restart Device
      • Upload Logs to S3 using PreSigned URLs
    • Software Asset Optimization
    • Collaboration Optimization
      • Collaboration Optimization - Solution Overview
      • Collaboration Optimization - Configuration
      • Collaboration Optimization - Usage / Troubleshooting
    • Systems Management
      • Manage Configuration Drift
      • MS ConfigMgr - Client Health
        • MS ConfigMgr - Client Health - Summary
        • MS ConfigMgr - Client Health - Configuration Guide
      • Intune
        • Intune - Health
          • Intune - Health - Summary
          • Intune - Health - Configuration Guide
    • Return to the office
      • Return to the office - Planning
      • Return to the office - Readiness
    • Green IT
      • Green IT - Overview
      • Green IT - Configuration Guide
    • Hybrid Working
      • Hybrid Working Experience
      • Hybrid Working Experience - Installation and upgrade procedure
  • Integrations
    • Nexthink ServiceNow Service Graph Connector
      • Overview
        • Roles and Permissions
        • Modules
      • Installation and Configuration Guide
        • Pre-requisites
          • Configure Identification Rules
          • Import and setup the CMDB categories in Finder
        • Setup
          • Configure the connection
          • Configure import properties
          • Configure additional engines
          • Set up scheduled import jobs
      • Data transformation and mapping by default
      • How to customize the behaviour of the Connector
      • FAQ
        • Why ServiceNow Service Graph Connector?
        • What about Nexthink CMDB Connector?
        • Why is the name the primary key for the devices?
      • Troubleshooting
        • IRE identification issues
          • [No Choice found in the sys_choice table for the target table](integrations/nexthink-servicenow-service-graph-connector/troubleshooting/ire-identification-issues/ no-choice-found-in-the-sys_choice-table-for-the-target-table.md)
          • Identification rules not created
          • Discovery_source choice not created
        • Timeout Errors
          • ECCResponseTimeoutException
          • HTTP 0 error
        • MID server issues
          • java.lang.NullPointerException
          • MID Server memory issues
          • Not trusted certificates in Quebec release
        • Configure credentials issues
          • [Not allowing update of property authentication_choice](integrations/nexthink-servicenow-service-graph-connector/troubleshooting/configure-credentials-issues/ not-allowing-update-of-property-authentication_choice.md)
          • Invalid username/password combo (HTTP 401/403)
        • Configure Engines Issues
          • [The client secret supplied for a confidential client is invalid](integrations/nexthink-servicenow-service-graph-connector/troubleshooting/configure-engines-issues/ the-client-secret-supplied-for-a-confidential-client-is-invalid.md)
        • No Cis imported and no errors found in the log
    • Nexthink ServiceNow Incident Management Connector (IMC)
      • Installation and configuration guide (IMC)
      • Troubleshooting Guide (IMC)
      • Domain separation installation (IMC)
    • Nexthink ServiceNow CMDB Connectors
      • Installation and Configuration Guide
      • Troubleshooting Guide
      • Field transformation and normalisation examples
    • Nexthink Event Connector
      • High level overview
      • Installation and Configuration Guide
      • Troubleshooting guide
      • RPM installation
      • Splunk specific documentation
        • Upgrading from Splunk Connector to Event Connector
        • Splunk add-on installation and usage
    • Nexthink Chatbot SDK
      • Introduction and concepts
      • Installation, configuration and update guide
        • Installation and configuration
        • Update to newer version
        • Uninstallation
        • Authentication
        • Topics configuration
        • Remote action configuration
        • Advanced configuration
        • Additional resources and references
      • Dimensioning guide
      • Troubleshooting
      • Technical solution description
      • Downloads and release notes
  • Glossary and references
    • Search and information display
      • Search in Finder
      • Keyboard shortcuts for column display selection
      • Campaign display compatibility
      • Real-time and consolidated service data
      • Service errors and warnings
      • Errors and warnings for devices and executions
      • Types of widgets
      • Widget compute state in charts
      • Errors in the execution of remote actions
      • Top results of Cross-Engine investigations
      • Engine data history
    • Tooltips in the user and device views
      • Alerts tooltips
      • Warnings tooltips
      • Errors tooltips
      • Activity tooltips
      • Services tooltips
    • Database information and organization
      • Maximum supported values
      • Local and shared content
      • Device Identification
      • Local IP address of devices
      • Timestamping of events
      • Boot and logon duration
      • Application startup duration
      • Application not responding events
      • Memory and CPU usage
      • Status of TCP connections
      • Status of UDP connections
      • Network and port scan conditions
      • Binary paths
      • Maximum number of Binaries
      • Package Executable Mapping
      • Metro apps
      • Investigation with packages
      • Portal aggregation and grouping
      • Focus time metric
    • Security
      • Access rights and permissions
      • Active Directory authentication
      • Canonical domain names for Windows authentication
      • System alerts
      • Audit trail
      • Appliance hardening
      • STIG hardening
      • FIPS 140-2 compliance
      • Security bulletins
        • Is Nexthink affected by Okta breach
        • Is Nexthink affected by SolarWinds breach
        • Nexthink and Log4j - Security bulletin
        • CVE-2022-22965 - Security Vulnerability Spring4shell - Spring Framework
        • Version 6.22.2.10: Security Vulnerability Maintenance Release
        • The Collector V6.27.X Release – Security Bulletin
    • References
      • Components of the Collector
      • Server support
      • Compatibility mode
    • Glossary
      • Activity
      • Alert
      • Application
      • Binary
      • Campaign
      • Category
      • Connection
      • Dashboard
      • Destination
      • Device
      • Domain
      • Entity
      • Event
      • Executable
      • Execution
      • Focus time
      • Hierarchy
      • Installation
      • Investigation
      • Keyword
      • Metric
      • Module
      • Object
      • Package
      • Platform
      • Port
      • Printer
      • Score
      • Service
      • Session
      • System boot
      • User
      • User logon
      • Web request
      • Widget
  • API and integrations
    • Integrating with Nexthink
      • Event Connector
      • Getting data through the NXQL API
      • Bidirectional integration with the Finder
      • Count metrics API
      • Software metering API
      • Services API
      • List Engines API
      • GetSID API
      • Triggering campaigns via their API
      • Triggering remote actions via their API
      • Audit trail API
      • Integrating investigation-based alerts
      • Downloads
    • NXQL API
      • Introducing the NXQL API
      • NXQL Tutorial
      • NXQL language definition
      • NXQL Data Model
    • Integrations
      • Excel integration with NXQL
      • Power BI
      • Azure Data Lake Storage Gen2
      • Splunk Event Connector
    • ServiceNow
      • CMDB Connector
      • Incident Management Connector
      • Event Management

© Nexthink

  • Privacy policy
  • Responsible Disclosure Policy
On this page
  • Overview
  • Creating a metric in the Finder
  • Retrieve section
  • Compute daily section
  • Matching section
  • Options section

Was this helpful?

  1. User manual
  2. Monitoring IT custom metrics

Creating a metric

Last updated 9 months ago

Was this helpful?

Overview

Use metrics to measure and survey over time the characteristics of those elements in your IT infrastructure that interest you the most. Metrics reduce complex queries to a single figure, table, or chart that lets you quickly evaluate the state of key components in your IT ecosystem.

To create metrics in the Finder, you must be a user with granted access to the Finder and have the right to edit system content: categories, services, alerts, and metrics.

Creating a metric in the Finder

To create a new metric in the Finder:

  1. Log in to the Finder as a user with the appropriate permissions.

  2. Select the Metrics section from the accordion on the left-hand side of the main window.

  3. Right-click the header of the Metrics section or the empty area below it.

  4. Select Create new metric from the menu.

  5. Complete the form to define the metric:

    1. Type in the name of the metric.

    2. Optional: Give a short description on the function of the metric.

    3. Fill in each section of the form as described below.

  6. Optional: Click Run as investigation to . This option gives you an instant preview of the results that you can expect from the metric.

  7. Click Save to store permanently the definition of the metric.

Retrieve section

Specify the kind of objects used to compute the metric In the Retrieve section:

  1. In the upper-right part of the section, tick the boxes of the platforms to which the metric applies: Windows, Mac OS or Mobile.

  2. Select the type of the objects on which to base the computation of the metric: users, devices, applications, etc.

The choice of a particular kind of object has a logical impact on the grouping options and aggregated values that you can use to define the metric.

Compute daily section

The Portal computes the value of each metric once every day, hence the name of the section. For longer periods of time, the Portal combines the values obtained for a metric over several days in the way that you specify.

In the Compute daily section, choose the type of metric that you want to create. Depending on the type of metric, specify how to compute aggregated values for the metric or how to group the retrieved objects when seeing the details of the metric in the Portal.

  1. Choose the type of metric from the following options. The word objects is replaced by the kind of objects that you selected in the Retrieve section:

    • Count metric

      1. Select the total number of [active] objects to create a metric that counts the selected type of objects. The active keyword, when present, indicates that only those objects that were seen during the last day are taken into account for the calculating the value of the metric for that day. Otherwise, all objects in the full history of the Engine are taken into account. The presence of the active keyword depends on the type of objects being counted:

        • The active keyword is mandatory for applications, executables, binaries, ports, destinations, domains, and printers.

        • The active keyword is necessarily absent for packages.

        • For users and devices, choose to count either all the users or devices or only those that were active the last day.

    • Quantity metric (only available for device and user objects)

      • For device objects:

        1. Select the aggregate of active devices to create a metric that computes a single value by combining the values of the chosen aggregate in the retrieved devices.

        2. Choose the particular device activity, score, or output of remote action on which to base the metric from the list. Only outputs that yield a numeric value are available for creating quantity metrics.

          • If you choose to combine the values of either a score or the output of a remote action, select between active devices or all devices depending on whether you want to limit the retrieved devices to those that were active during the last day or not.

      • For user objects:

        1. Select the score / EUF opinion scale of all users to create a metric that computes a single value by combining user scores or the answers given by the users to an opinion scale question.

        2. Choose the particular user score or opinion scale question on which to base the metric from the list.

    • Top metric

      1. Select the top N objects with highest / lowest aggregate to create a metric that keeps a top list of objects with the highest or lowest value of the specified aggregate.

      2. Choose between 10 to 100 (in increments of 10) the number N of objects to display in the top list.

      3. Set either highest or lowest to order the top list of objects by descending or ascending value of the aggregate respectively.

      4. Select the particular aggregate on which to base the top list.

  2. Select the grouping options or aggregate computation when applicable:

    • For count and quantity metrics, optionally select how the Portal groups the results when you observe the details of the metric. In the Group by list:

      • Select - none - if you do not need to group the results.

      • Select a field or a category to group objects by the value of that particular field or category.

        • Optional: Add another field or category after the keyword and to define a second criterium to group by the objects.

    • For quantity and top metrics, select how to compute the aggregated values for the metric in Aggregated by.

      • For quantity metrics, describe how to combine the individual values associated to each one of the retrieved devices. The Portal applies the selected aggregation method to compute the metric for groups of devices (such as those that share a same location in the hierarchy) and for time frames that span longer than one day. Depending on the aggregate (only the options that make sense for the particular aggregate are available), choose among:

        • sum over all devices and the whole timeframe

        • maximum value per device per day

        • average value per device per day

        • minimum value per device per day

      • For top metrics, describe how the aggregate is computed individually for each object in the top list for periods of time longer than one day. Depending on the aggregate (only the options that make sense for the particular aggregate are available), choose among:

        • sum over the whole timeframe

        • maximum value per day

        • average value per day

        • minimum value per day

Matching section

In the Matching section, specify a set the conditions that the objects in the Retrieve section must meet for taking part in the computation of the metric and, optionally, the hours of the day when the retrieved objects must match those conditions.

To add the conditions:

  1. In the Conditions subsection, click the link Click here to add a new condition. The placeholders for the condition fields show up.

  2. Set the object, activity, or event to which the condition applies.

  3. Set the attribute or category that you want to constraint.

  4. Set the operator for comparison (e.g. is, is not, starts with, etc).

  5. Set the matching value, if you selected an attribute constraint, or the matching keyword, if you selected a category constraint.

  6. Optional: When setting more than one condition, click on Advanced to edit the logical expression that combines the conditions. By default, conditions are combined by a logical AND, so all must be fulfilled.

  7. Optional: Specify a condition on an aggregate value after the and keyword at the bottom of the conditions section. The value of the aggregate is computed for the whole day unless you specify a Between clause (see below).

Any type of metric accepts the values of opinion scale questions and scores as constraints for conditions. In that way, you can create a metric that counts the number of users who gave an answer with value greater than 5 to a particular opinion scale question, for example.

On the other hand, some combinations of metrics, conditions, and additional display fields are incompatible. In particular, count metrics that take into account inactive objects are incompatible with setting a condition on activities or events, or when using a between clause. Under the hood, the computation of these metrics is based on investigations over the full available period in the Engine; therefore, they have similar limitations. An error icon (a small white cross inside a red circle) appears at the selection for counting the total number of objects to indicate the mismatch. There is an exception to this rule: you can set conditions on installations when retrieving the total number of packages. In general, if you add a condition and an error icon appears on its right side, the condition is in conflict with another condition or with one of the chosen attributes to display. By hovering the mouse over the error icon, see the reason for the conflict in a tooltip.

To delete a condition:

  1. Click the trash icon to the right of the condition fields.

For count metrics on active objects, an additional setting specifies how objects are counted when the time frame in the Portal is longer than one day:

  1. Choose either at least one day or the last active day from:For periods longer than one day, count objects that meet conditions on at least one day / the last active day

As a guideline, select at least one day when you want the metric to account for event ocurrences during the period. For instance, a metric that counts the number of devices with hard resets. For a device to be counted, the hard reset can happen any time during the interval. On the other hand, select the last active day for metrics that have an inventory function. For example, a metric that counts the number of devices with two monitors. Indeed, if a device does not have two monitors on the last day of the period, it must not be added to the inventory.

Note that this setting is not available for count metrics that count both active and inactive objects. Indeed, it does not make much sense to see the values of this kind of metrics for periods longer than one day. Widgets based on metrics that count all objects are disabled in the Portal when a period longer than one day is selected.

Optionally, restrict the time of the day to which the computation of the metric applies by ticking the check box and setting the start time and the end time of the computation in the last line of the Matching section:

  • Between HH:MM and HH:MM.

Options section

The contents of the Options section depend on the type of metric that you selected.

For count metrics, the following options are available:

  1. Tick Include ratio to get a percentage in addition to a cardinal number as the displayed value of the count metric in the Portal.

    • The percentage is computed as the number of objects that match the conditions defined in the metric divided by the number of objects that match another set of conditions.

    • Define the new set of conditions in the same way as you defined the conditions for the metric with the tools that show up when you tick the Include ratio check box.

  2. Tick Include variation and threshold indicator for the Portal to display changes in the value of the metric with respect to its last value and indicate whether a value increase or decrease is a positive or a negative thing for you. Select one from these three options:

    • variation indicator only

      1. By default, a green arrow up and a red arrow down are displayed below the statement, meaning that an increase in the value of the metric is a positive thing. For instance, an increase in the number of devices with antivirus is a good thing.

      2. To change the default and indicate that a value increase of the metric is a negative thing, click invert to switch the two arrows. For example, an increase in the number of bluescreens is a bad thing.

    • variation indicator and 1 threshold

      1. Choose the direction of the variation indicator by clicking invert if appropriate (see first option).

      2. Set the value of the threshold on top of the horizontal arrow. Only when the increase in the value of the metric is higher than the threshold, the indicator changes color (to green if increase is good, to red if it is bad).

      3. If you ticked the option Include ratio, you may want to define the threshold as a ratio:

        1. To the right of the variation message, choose between absolute or ratio values (Include variation message based on absolute / ratio values).

          • Choose absolute to express the threshold in number of objects, as in the case described above.

          • Choose ratio to express the threshold in a percenteage related to the ratio value computed for the metric.

            • If you choose ratio you can ignore the threshold value when grouping results by hierarchy in the Portal if the number of devices in a node of the hierarchy is too small. Tick the option Ignore threshold if there are less than N devices in a hierarchy node and set a value for N.

    • variation indicator and 2 thresholds

      1. Choose the direction of the variation indicator by clicking invert if appropriate (see first option).

      2. Set the thresholds in the same way as explained in the 1 threshold case. You can also express the thresholds in percentage values if you ticked the Include ratio option. The only difference with the 1 threshold option is the addition of the yellow color:

        • If the increase in value of the metric is higher than the first threshold, the variation indicator turns yellow.

        • Only when the increase in the value of the metric is higher than the second threshold, the variation indicator changes color (to green if increase is good, to red if it is bad).

    1. Later, select in the Portal which of these fields to display when seeing the details of the metric.

For quantity metrics, only the options for the variation indicator and thresholds are available. Refer to step 2 of count metrics for instructions. Ignore the sub-options related to ratio, since these are not supported by quantity metrics.

In the case of top metrics, only the option to set additional display fields is available. Refer to step 3 of count metrics for instructions.


RELATED TASKS

RELATED CONCEPT

The procedure to define these conditions in the Conditions part of the definition of a metric is very similar to . Conditions are a set of rules that apply to any item (object, activity, or event) that is related to the objects selected in the Retrieve section:

Set the Additional display fields using the label selector in the same way as you to display in an investigation. The fields selected as criteria to group the results in the Group by list are automatically added as display fields and they cannot be removed.

Editing the options of an investigation
Executing an investigation
Metric
execute the metric as if it were a quick investigation
setting the conditions of an investigation
select the columns