Alerting

Sending alert based on Threshold conditions

sajug
New Member

Hello
I have query that gets me x values every 5 minutes. Now what I am trying to achieve is, alert based on threshold conditions. For example

index=xxx | timechart span=5m eval(round(avg(x),3)) as xvalues

Condition for alerting below

xvalues<100 no alert
xvalues>100 and <200 - Warning alert
xvalues>200 Critical

Thanks in advance

0 Karma

sajug
New Member

Oops I was not aware the editor does not support certain symbols. So here are the alerting conditions again

xvalues<=100 no alerting
xvalues>100 and <=200 warning
xvalues>200 - Critical Alert

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...