How can we decide the threshold value which is the best value ?

[rajhemant26]

Hello everyone.

Want to display the output only for the time which crosses 18 months (earliest time)

[woodcock]

This is an intensely broad and tricky problem. Here is some stuff to try:
https://answers.splunk.com/answers/511894/how-to-use-the-timewrap-command-and-set-an-alert-f.html
https://splunkbase.splunk.com/app/4375/

[DMohn]

I am not yure if anyone might be able to help you here...

We don't know
- which metrics are you collecting
- What are the requirements
- What is the capacity of the measured system
- What should be alerted/notified
- ....

I guess you need someone who is able to tell the meaning of these numbers, this has to be someone of the respective business unit running the measured device.