IIS windows exporter alerting

[Kavan Mccanaan]

  # Caculates HTTP error Responses total 

  - record: windows:windows_iis_worker_request_errors_total:irate5m

    expr: irate(windows_iis_worker_request_errors_total[5m])

  - alert: IIS error requests rate

    expr: sum without () (rate(windows:windows_iis_worker_request_errors_total:irate5m{status_code!="401"}[5m])) > 3

    for: 5m

    labels:

      severity: critical

      component: WindowsOS

    annotations:

      summary: "High IIS worker error rate"

      description: "IIS http responses on {{ if $labels.fqdn }}{{ $labels.fqdn }}{{ else }}{{ $labels.instance }}{{ end }}for {{ $labels.app }} has high rate of errors."

      dashboard:

      runbook:

I'm trying to do something like this to alert on when people are getting errors whilst trying to connect to a webapp, the issue is the query itself 'windows_iis_worker_request_errors_total:irate5m' is returning non integer values

The idea was to evaluate over a rolling 5 minute window the number of errors.

of course in an ideal world I'd alert on the rate of errors using the total requests metrics and dividing, however the two metrics have a label mismatch and I am unsure how to perform that query.

Would really appreciate any assistance!

[Tim Schwenke]

Please post this question / the next question you have in the **Prometheus Users** group (here) instead of **Prometheus Developers**.

And if you really want to "evaluate over a rolling 5 minute window the number of errors", replace `rate` with `increase`. On a second look, just use the following expression. There is no need for the recording rule in your case.

```

sum by (fqdn, instance, app) (increase(windows_iis_worker_request_errors_total{status_code!="401"}[5m]))

```

[Kavan Mccanaan]

Thanks very much, that works a treat, I have continued the discussion in the correct group, apologies.

https://groups.google.com/g/prometheus-users/c/DKfzDuZQs0Y