Hi I need help with my email alerts.
I basically need to have an email alerting me that one of my process which I am logging is taking more than 2 hours or x hours.
So I have the basic query set up and let's say it is QUERY.
I've made the following alert from the following query:
QUERY | eval result=if(x>2,"YES","NO") | table result
where x is the current time since the process started (in hours).
I then saved this query as an alert and used the following settings:
Alert type: real time
Trigger condition: custom
Custom condition: search result=YES
in: 2 day(s)
I verified that the search query:
QUERY | eval result=if(x>2,"YES","NO") | table result | search result=YES
gives me a result if the time taken is more than 2 hours however it doesn't trigger an email alert.
Anyone can give me an idea of what I did wrong or where I can go from here?
... View more