All,
I want to have an alert fire any time an application pool is more than say 2 standard deviations from the normal. We have about 100 application pools.
I am guessing the logic would look something like this?
tag=java tag=problem |
stats count by app_pool |
where count > [somelogic 2std * somesplunkcommand I dont know]
↧