It's difficult to determine the correctness of a query without knowing the data being searched as well as the desired output.
There are, however, some problems with the query. Some may be the result of errors entering the query into the question.
The table command makes only 4 fields available, but the following rename command attempts to rename two fields that no longer exist (percent_off, percent_on).
The base query is searching for the string "entity_title=service_aggregate". Perhaps it intends to search for the field entity_title containing the value "service_aggregate" ( entity_title="service_aggregate" ).
The calculation of percent_off is missing a * character.
The field server_off claims to be in minutes, but is multiplied by 5 for no apparent reason.
Please verify the alert_value field contains "N.A" and not "N/A".
... View more