CPU Usage Alert not working

praneethlekkala — Fri, 12 May 2023 12:33:47 GMT

We have the following alert to check if the CPU is >=85 and alert us for some reason its not working, it worked till 14th April 2023 but not after that

index=index host=12345 sourcetype="PerfmonMk:CPU" | stats avg(cpu_load_percent) as CPUUSAGE by host | where CPUUSAGE >= 85

Our Data is listed as below:

4/30/23 11:59:56.000 PM	0 15.797067520866204 7.498591389607462 8.27969465935824 1842.8858123299901 0 0 10.299361837763916 0 82.45220035416348 3.466196874917047 78.98600347924642 0 89.49445480387092 1437.5109298999423 0 %_Processor_Time = 15.797067520866204 cpu_load_percent = 15.797067520866204 host = 12345 source = PerfmonMk:CPU sourcetype = PerfmonMk:CPU
	4/30/23 11:59:56.000 PM	1 10.32934463261076 5.311502234305285 4.999060926404974 1399.9132595018916 0 0 52.3967534270708 0 88.2533286122202 3.1865844001204375 85.06674421209975 0 102.49364935638849 847.3474972156449 0 %_Processor_Time = 10.32934463261076 cpu_load_percent = 10.32934463261076 host = 1234 source = PerfmonMk:CPU sourcetype = PerfmonMk:CPU
	4/30/23 11:59:56.000 PM	2 7.673593515458121 2.6557511171526427 4.999060926404974 1328.2177018545447 0 0 6.599591080508917 0 90.14091802854833 2.2141230769799893 87.92679495156834 0 45.59717473806161 910.1436062847298 0 %_Processor_Time = 7.673593515458121 cpu_load_percent = 7.673593515458121 host = 1234 source = PerfmonMk:CPU sourcetype = PerfmonMk:CPU

Re: CPU Usage Alert not working

ITWhisperer — Fri, 12 May 2023 12:43:50 GMT

From the data you have shown, none of the cpu_load_percent appear to be over 85. Could this be why the alert hasn't triggered?

topic CPU Usage Alert not working in Splunk Search

CPU Usage Alert not working

Re: CPU Usage Alert not working