From 592c67d1f2621841036f6177711331e1f140ccfe Mon Sep 17 00:00:00 2001 From: bryant-treacle Date: Fri, 19 May 2023 10:29:15 -0400 Subject: [PATCH] Update alarm_pcap_retention.json --- salt/influxdb/templates/alarm_pcap_retention.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/salt/influxdb/templates/alarm_pcap_retention.json b/salt/influxdb/templates/alarm_pcap_retention.json index 0964906c7..969d462c9 100644 --- a/salt/influxdb/templates/alarm_pcap_retention.json +++ b/salt/influxdb/templates/alarm_pcap_retention.json @@ -5,7 +5,7 @@ "name": "alarm-pcap-retention" }, "spec": { - "description": "Percent used space on the root partition of at least one node has exceeded the alarm threshold.", + "description": "Triggers when the PCAP retention (in days), falls below the defined threshold. To tune this alert, modify the value for the appropriate alert level.", "every": "1m0s", "name": "Low PCAP Retention", "query": "from(bucket: \"telegraf/so_short_term\")\n |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n |> filter(fn: (r) => r[\"_measurement\"] == \"pcapage\")\n |> filter(fn: (r) => r[\"_field\"] == \"seconds\")\n |> map(fn: (r) => ({ r with _value: r._value / (24.0 * 3600.0)})) |\u003e map(fn: (r) =\u003e ({r with _value: int(v: r._value)}))\n |> aggregateWindow(every: 1m, fn: mean, createEmpty: false)\n |> yield(name: \"mean\")", @@ -24,4 +24,4 @@ } ] } -}] \ No newline at end of file +}]