Alerting

alert

vinod_52791
Engager

I am getting success percentage from the query as 97.00% and my requirement is to add an alert when success percentage is below 95.00%

i am getting success % from below query

vinod_52791_0-1637320029885.png

please suggest the query to add an alert when successrate is 95.00% in one hour span

Labels (1)
Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Don't add the % to the successrate field, then you can do numeric comparisons on it. If you still want it displayed with the % sign, you can use fieldformat.

| eval successrate=100*successcount/total
| fieldformat successrate=successrate."%"

 

0 Karma

vinod_52791
Engager

hi @ITWhisperer 

i want to send an alert when result is below 95.00%

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| where successrate < 95

If you get any results, raise an alert

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...