I am trying to alter the response Time History Chart to display a red bar when a failure occurs and not when a response time threshold is met.
sourcetype="web_ping" `website_monitoring_search_index` title="$title$" | timechart avg(total_time) as response_time | eval response_time_over_threshold=if(response_time>`response_time_threshold`,response_time,0) | eval response_time=if(response_time>`response_time_threshold`,0,response_time)
TIA
How did you identify that failure is occurred?
Hi @493669
failures occur based on response_code for example a 503 error
Thanks