Hi,
I want to trigger an email if the number of results is greater that 25 and trigger a PagerDuty only when the number of results is greater that 50.
I can achieve this by setting up as two different alerts.
resultHowever, I would like to know if there is a better/optimized way to achieve this.
Thanks!
The best way to do this is have various searches append their results into a lookup file and then have 2 more scheduled searches peek into that lookup file, each with its own criteria: one that sends emails, the other that sends pages.