HI
i am getting below response from my Splunk query, please refer below screenshot
If you see the above screenshot you can see the result is 92.20%,my requirement is i need to send an alert when ever the percentage is below98.00%
so could you please suggest proper query in order to trigger an alert when ever the result from query is below 98.00% in a time frame of 1 hour
Remove the "%" from successrate. Add | where successrate < 98 to the end of the query. If necessary, you can use an eval after that to put the "%" back. Configure the alert to trigger if there are more than zero results returned by the query.