https://community.splunk.com/t5/All-Apps-and-Add-ons/Monitoring-rapid-increase-in-RAM-Utilization/m-p/580498#M75868 <P>Yes you can set threshold in your query using eval and case like eval threshold = case(memory==90 , "Critical" , memory== 85, "warning" ,memory==70, "ok") and the trigger alert on the threshold field.</P> Mon, 10 Jan 2022 17:41:38 GMT SinghK 2022-01-10T17:41:38Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Monitoring-rapid-increase-in-RAM-Utilization/m-p/580496#M75867 <P>Do we have a query for an alert if the memory usage increases by 20% from the previous 20 minutes.&nbsp; &nbsp;</P><P>So if the server was running with an average RAM usage of 50%, then the server suddenly increases to 75% RAM usage, we would trigger an alert.</P> Mon, 10 Jan 2022 17:31:56 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Monitoring-rapid-increase-in-RAM-Utilization/m-p/580496#M75867 sureshkumaar 2022-01-10T17:31:56Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Monitoring-rapid-increase-in-RAM-Utilization/m-p/580498#M75868 <P>Yes you can set threshold in your query using eval and case like eval threshold = case(memory==90 , "Critical" , memory== 85, "warning" ,memory==70, "ok") and the trigger alert on the threshold field.</P> Mon, 10 Jan 2022 17:41:38 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Monitoring-rapid-increase-in-RAM-Utilization/m-p/580498#M75868 SinghK 2022-01-10T17:41:38Z