Activity Feed
- Posted Re: Send alert with 2 condition and time constraint. on Alerting. 02-23-2022 12:08 AM
- Posted How to send alert with 2 condition and time constraint. on Alerting. 02-22-2022 11:17 PM
Topics I've Started
Subject | Karma | Author | Latest Post |
---|---|---|---|
0 |
02-23-2022
12:08 AM
Hi, Thanks for your solution. But I did not see any part of the query that is handling of delay of 15secs. Because we are expecting some delay of 15secs, and dont want to receive false positive alerts to our duty personnel. Thanks. Zhi Yu
... View more
02-22-2022
11:17 PM
Query 1
index=ops_gtosplus trans_id="PREGATE_DOCU" application_m="GTOSPLUS_OPS_GATEGW_BW" msg_x="MSG PROCESSING | END OK"
Query 2
index=ops_gtosplus trans_id="PREGATE_DOCU" application_m="GTOSPLUS_OPS_GOS_SB" msg_x="MSG PROCESSING | END OK"
But query contain event_id. Want to know how to search records for event_id that is in query 1 but not in query 2. And need to give in 15sec allowance.
For e.g. event id appear in query 1 at 2pm. then if by 2:00:15pm, the event id still does not appear in query 2, need to send out alert.
... View more
Labels
- Labels:
-
alert condition