About adrianrepublic

adrianrepublic · ‎04-06-2022

We have a lookup table that contains IDs for specific devices grouped by location IDs. This has been working great for emailing alerts when specific thresholds trigger alerts. However we want to be able to trigger sms messages when an alert for a individual location ID takes place. We find that we can set this up with the TWILLIO alert action but we can only specify one phone number. Is there a way to do this using VictorOps, Twillio or is a modular script the best method?

adrianrepublic · ‎10-16-2020

hi @rnowitzki it seems to have produced the csv which is great. However because the alert trigger is based on a value over an average over 24 hours and the scheduled alert runs everyday at 9am the timestamp how do i add the timestamp/date to the csv?

adrianrepublic · ‎10-14-2020

Hi @rnowitzki many thanks for this that could be a great option. I will set this up and hopefully it produces a report. Would you suggest appending or replacing? I would like to be able to keep a certain amount overtime so appending would make more sense.

adrianrepublic · ‎10-14-2020

We have alerts setup which trigger an email when a specific device has triggered. This has been working great and provided good alerting based on threshold below. The search is below: index=index1 sourcetype="devices" earliest=-24h latest=now| stats avg(temp) as avg_temp by customer_id | where avg_temp < 15 However a customer wants reporting to show the individual customer/device and how many times it has alerted.Is there any way to report on this as the scheduler.log doesnt provide this granularity for say 3 months triggered alerts?

adrianrepublic · ‎10-06-2020

Worked a treat!

adrianrepublic · ‎10-06-2020

I have a set of devices that are identified by a very long 15 number. The first 8 numbers are just a prefix which we would like to hide and only display last 7 numbers 867723030939341 is an example index=index1 sourcetype=devices | stats count by device.... Is there a ay to rem

adrianrepublic · ‎10-17-2019

We have been using a lookup table for many customers who are separated via separate indexes. The table is simple but drives our device dashboard data using a customer_id_tok for dropdowns. Each customer has a different prefix e.g 1100001 (customer A) and 1500002(customer B) on the lookup. However we have devices that have written to two or three indexes over time as we have reused the devices for different customers when fixed. This now seems to have caused a problem on individual customer dashboards as they can see the "customer_id" which is for another customer in the lookup as the device historically was linked to another "customer_id" Is there anyway of segregating via the token or some other way so that the dashboard dropdown can only see say customer_id's prefixed with say 11 or their matching prefix?

adrianrepublic · ‎10-04-2019

richgalloway that seems to have done the job 🙂 Thanks very much.

adrianrepublic · ‎10-01-2019

That nearly worked. Thanks 🙂 (index="index1" device=* customer_id=*) OR (index="weather") | stats avg(hum) as relative_humidity avg(temp) as temperature by customer_id | eval dew_point=temperature-((100-relative_humidity)/5.0) However something which ive noticed which could be any issue is that the both indexes have a temperature but on one index its temperature(weather index) and on the other its temp(index 1). When i change it to temperature it doesnt seem to produce/include the values from the "weather" index. I basically want the temperature from the weather index vs humidity of the index1

adrianrepublic · ‎10-01-2019

I am trying to produce or calculate the Dew Point in Celsius of data in two separate indexes. I believe the offcial Dew point formula is Td = T - ((100 - RH)/5.) I want to basically use this formula to produce Dew point using relative humidity on one index with temperature on another index

Posts	10
Solutions	0
Karma Given	1
Karma Received	1
Member Since	‎10-11-2017

Online Status	Offline
Date Last Visited	‎04-12-2022 08:10 AM

How to set up SMS alerts to individual phone numbe...

alert report/search showing triggered devices

How to remove first 8 numbers of a field

Lookup table issues devices

Dew Point Calculation