Hi all I need help to configure alert for radius accounting request per second. To find requests per second we did this formula: sourcetype="cisco:bulkstats:up:systemSch10" host=dyu-sae-1-1 | stats sum(aaa_ttlradacctreq) as req sum(aaa_ttlradacctreqretried) as retr by _time | delta req as rq | delta retr as rt | timechart span=5m per_second(rq) as "requests per second" per_second(rt) as "retries per second" per_second(rq) shows approximately 400 request/s So I want to configure alert if this goes to 600 request/s  Any help appreciated   Many thanks ... View more