Sudden Increase in Source Volume
This alert is triggered when there is a 60% increase in data volume compared to a prior window.
General Configuration
Field | Value |
---|---|
Name | Sudden increase in source volume. |
Description | Triggers when a source volume increases by 60% compared to prior window. |
Evaluation and Condition Configuration
Field | Value |
---|---|
Operation | Custom |
Window Type | Tumbling |
Window Duration (minutes) | 30 |
Group by Field Paths | .source |
Operation | Custom |
Window Type | Tumbling |
Window Duration (minutes) | 30 |
Conditional Statement | if (.log_volume percent_change_greater_or_equal 60) |
Event Timestamp | .timestamp |
Custom Script
Was this page helpful?