I have time series data and am trying to search and create alerts.Sample data below
Id,timestamp,value
1,06/19/2019 10:00:00,6.2
2,06/19/2019 10:00:00,5.3
1,06/19/2019 10:05:00,6.1
2,06/19/2019 10:05:00,6.1
2,06/19/2019 10:10:00,6.6
1,06/19/2019 10:10:00,5.7
Alert when multiple id values exceed a threshold in a given time span.So,in the example above my search should generate an alert when Id's 1 and 2 both exceed a value of 5 in the last 10 minutes but not otherwise. How would I do this in SPL .Thanks for your help.
