Splunk Search

CPU Usage Alert not working

praneethlekkala
Path Finder

We have the following alert to check if the CPU is >=85 and alert us for some reason its not working, it worked till 14th April 2023 but not after that

index=index host=12345 sourcetype="PerfmonMk:CPU" | stats avg(cpu_load_percent) as CPUUSAGE by host | where CPUUSAGE >= 85

 

Our Data is listed as below:

 

4/30/23
11:59:56.000 PM
 
0 15.797067520866204 7.498591389607462 8.27969465935824 1842.8858123299901 0 0 10.299361837763916 0 82.45220035416348 3.466196874917047 78.98600347924642 0 89.49445480387092 1437.5109298999423 0
 4/30/23
11:59:56.000 PM
 
1 10.32934463261076 5.311502234305285 4.999060926404974 1399.9132595018916 0 0 52.3967534270708 0 88.2533286122202 3.1865844001204375 85.06674421209975 0 102.49364935638849 847.3474972156449 0
 4/30/23
11:59:56.000 PM
 
2 7.673593515458121 2.6557511171526427 4.999060926404974 1328.2177018545447 0 0 6.599591080508917 0 90.14091802854833 2.2141230769799893 87.92679495156834 0 45.59717473806161 910.1436062847298 0
Labels (1)
Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

From the data you have shown, none of the cpu_load_percent appear to be over 85. Could this be why the alert hasn't triggered?

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...