Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How do I alert when cpu usage is more than 80% since 15 or more minutes

$
0
0
Hi, I want to alert when cpu usage percentage is more than 90% since 15 or more minutes. Or we can say ,alert after 3 iterations of same having usage more than 80% I am trying this, index="idx2" source="Cpu.sh" | eval usage=(100-idle) | stats latest(usage) as "usage" max(idle) as "idle" latest(_time) as time by host | eval time= strftime(time,"%d-%m-%y %H:%M:%S") | table time host usage idle | where usage>90 And alert is scheduled for every 5 minutes and for last 15 minutes duration. But alert keep triggering immediately when CPU util shows >=90% utilization. Please suggest ,if it to alert only if utilization is >90% for 15minutes or more.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>