Monitoring Splunk

Alert

Amoreuser
New Member

Hello,

I just wanted to know more detailed information so I opened the case.

About Alert settings.

I set  Threshold '90' , Trigger 'Immediately'  and Alert when ' Above ' 

If the above settings are
Does the alarm occur from 90.1?

I remember in the beginning, if I set it to 90, it was registered as 89.

It's currently set up that way
I would like to know if an alert is occurring at 89.1.

In case an alarm occurs at 89.1,
I need to fix it as soon as possible

Please reply

 

Thank you !!!

 

0 Karma

PickleRick
SplunkTrust
SplunkTrust

What product/service are you talking about? Splunk Enterprise doesn't have the settings you describe. Is it Observability?

0 Karma

sainag_splunk
Splunk Employee
Splunk Employee

Hi @Amoreuser, Based on what you described, there seems to be an config issue in your alert setup. If your threshold is set to 90 but alerts are triggering at 89.1, you may want to check a few things: First, verify that your alert condition is exactly set to "Above" and not "Above or Equal". Second, take a look at your search query to make sure there's no unintended data processing affecting the values. If you're working with decimal values, you might want to add a round() function in your search to ensure more precise threshold control.

Could you share your search query so I can help identify the issue?





If this Helps, Please Upvote.

0 Karma
Get Updates on the Splunk Community!

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...

AI Adoption Hub Launch | Curated Resources to Get Started with AI in Splunk

Hey Splunk Practitioners and AI Enthusiasts! It’s no secret (or surprise) that AI is at the forefront of ...