<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: alert in Alerting</title>
    <link>https://community.splunk.com/t5/Alerting/alert/m-p/575624#M13248</link>
    <description>&lt;P&gt;Don't add the % to the successrate field, then you can do numeric comparisons on it. If you still want it displayed with the % sign, you can use fieldformat.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| eval successrate=100*successcount/total
| fieldformat successrate=successrate."%"&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Fri, 19 Nov 2021 12:01:17 GMT</pubDate>
    <dc:creator>ITWhisperer</dc:creator>
    <dc:date>2021-11-19T12:01:17Z</dc:date>
    <item>
      <title>alert</title>
      <link>https://community.splunk.com/t5/Alerting/alert/m-p/575615#M13245</link>
      <description>&lt;P&gt;I am getting success percentage from the query as 97.00% and my requirement is to add an alert when success percentage is below 95.00%&lt;BR /&gt;&lt;BR /&gt;i am getting success % from below query&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="vinod_52791_0-1637320029885.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/16928iACFCDE593DE034C5/image-size/medium?v=v2&amp;amp;px=400" role="button" title="vinod_52791_0-1637320029885.png" alt="vinod_52791_0-1637320029885.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;please suggest the query to add an alert when successrate is 95.00% in one hour span&lt;/P&gt;</description>
      <pubDate>Fri, 19 Nov 2021 11:08:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/alert/m-p/575615#M13245</guid>
      <dc:creator>vinod_52791</dc:creator>
      <dc:date>2021-11-19T11:08:20Z</dc:date>
    </item>
    <item>
      <title>Re: alert</title>
      <link>https://community.splunk.com/t5/Alerting/alert/m-p/575624#M13248</link>
      <description>&lt;P&gt;Don't add the % to the successrate field, then you can do numeric comparisons on it. If you still want it displayed with the % sign, you can use fieldformat.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| eval successrate=100*successcount/total
| fieldformat successrate=successrate."%"&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 19 Nov 2021 12:01:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/alert/m-p/575624#M13248</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2021-11-19T12:01:17Z</dc:date>
    </item>
    <item>
      <title>Re: alert</title>
      <link>https://community.splunk.com/t5/Alerting/alert/m-p/575844#M13253</link>
      <description>&lt;P&gt;hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168"&gt;@ITWhisperer&lt;/a&gt;&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;i want to send an alert when result is below 95.00%&lt;/P&gt;</description>
      <pubDate>Mon, 22 Nov 2021 10:19:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/alert/m-p/575844#M13253</guid>
      <dc:creator>vinod_52791</dc:creator>
      <dc:date>2021-11-22T10:19:24Z</dc:date>
    </item>
    <item>
      <title>Re: alert</title>
      <link>https://community.splunk.com/t5/Alerting/alert/m-p/575849#M13254</link>
      <description>&lt;LI-CODE lang="markup"&gt;| where successrate &amp;lt; 95&lt;/LI-CODE&gt;&lt;P&gt;If you get any results, raise an alert&lt;/P&gt;</description>
      <pubDate>Mon, 22 Nov 2021 10:43:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/alert/m-p/575849#M13254</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2021-11-22T10:43:36Z</dc:date>
    </item>
  </channel>
</rss>

