I've got some performance data and I want to be alerted when the avg(total_requests) split by uri rises or drops by 10%. For now, you can aggregate a few hours worth of data in the average window.
I think this question may need more detail. However if I make a couple assumptions I can attempt an answer. (total_requests I find to be a somewhat confusing field name so Im going to call it 'request_count')
Assuming you are starting from a search that looks like
which would give you output like:
And you want your alert to fire if any of the rows rises by 10%...
And assuming you want the 'rises by 10%' to be based on a time range like comparing today to yesterday, then here's a way to do it.
Anyway, then the
Finally throw a
And there you go. If that search returns any results, then that's bad, and you want to email those results to somebody.
(If you'd prefer the results in the email were actually the full list of URI's today vs yesterday, you could take that whole where clause off the end, and instead put it in the 'custom alerting condition' when you set up the alert. )
answered 11 May '10, 07:18