Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Trigger and send mail after 15th occurrence based on threshold breach

$
0
0
Hi, My requirement is : I have create real time schedule which will run for every 2 mins (cron schedule) based on the CPU Utilization crossed threshold value and mail should not trigger after 2 mins. Mail has to trigger after 15th occurrence (ie after 15 * 2mins = 30 mins) if the threshold value crosses 98 %. Please let me know how to check for the above condition to send mail after 15th occurrence if it cross threshold value. Below is the query; | table Host,"Process ID", "Instance"," % CPU Time" |sort " % CPU Time" desc | head 10 | eval "Alert Status" = case(('% CPU Time'<=manual_threshold3),"NORMAL", (' % CPU Time'>manual_threshold4),"CRITICAL", (' % CPU Time'>manual_threshold3 AND ' % CPU Time'<=manual_threshold4),"WARNING") | search "Alert Status"="CRITICAL" | table Host,"Process ID","Instance"," % CPU Time","Alert Status" Thanks

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>