Alert setup

[amirarsalan]

Hi all!
Want to set up an alert.
I want it to alert when the value is 0 for more than 15 min.
What shall write in cron, earliest etc.
I have the search already.

Thanks in advance

[dindu · Accepted solution]

Hi,

You could give the below conf to achieve the functionality.
Please try and let us know.

   Cron : 0-59/15 * * * *  [Runs a search every 15 min,round the clock - 00,15,30,45 ]
   Earliest : -15m@m [ Give the window of search for the past 15 min ]
   Latest : now

[amirarsalan]

Thank You @dindu

[dindu]

Thanks

[richgalloway]

What you put in the cron, earliest, and latest boxes depends on how often you want your search to run and over what time frame. We need more information.