Hello,
I'm trying to set up an email alert to trigger when my response time hits 10s or more 2 times in 15 minutes. To test the alert, I have made it more than .1s. I have not been able to get the alert to work for the past 2 days, even though I can complete the search and see events occurring .
My search is:
source="My_Source" earliest=-5m | stats avg(ResponseTime) as value | where value > .1
It is a real-time Alert with a custom trigger condition of search count>2 in 15 minutes. I need a throttle on it, so I have been playing around with those settings, but nothing has seemed to trigger it.
Any suggestions on what might be happening?
Thanks in advance.
... View more