From 5b2d91b5b51bc1d6024f0312cff76edda6bc7300 Mon Sep 17 00:00:00 2001 From: bryant-treacle Date: Fri, 19 May 2023 10:32:53 -0400 Subject: [PATCH] Update alarm_zeek_packet_loss.json --- salt/influxdb/templates/alarm_zeek_packet_loss.json | 1 + 1 file changed, 1 insertion(+) diff --git a/salt/influxdb/templates/alarm_zeek_packet_loss.json b/salt/influxdb/templates/alarm_zeek_packet_loss.json index a236be521..cebd1dc50 100644 --- a/salt/influxdb/templates/alarm_zeek_packet_loss.json +++ b/salt/influxdb/templates/alarm_zeek_packet_loss.json @@ -5,6 +5,7 @@ "name": "zeek-packet-loss" }, "spec": { + "description": "Triggers when the average percent of packet loss is above the defined threshold. To tune this alert, modify the value for the appropriate alert level." "every": "1m", "name": "Zeek Packet Loss", "query": "from(bucket: \"telegraf/so_short_term\")\n |\u003e range(start: v.timeRangeStart, stop: v.timeRangeStop)\n |\u003e filter(fn: (r) =\u003e r[\"_measurement\"] == \"zeekdrop\")\n |\u003e filter(fn: (r) =\u003e r[\"_field\"] == \"drop\")\n |\u003e map(fn: (r) =\u003e ({r with \"_value\": r._value * 100.0}))\n |\u003e map(fn: (r) =\u003e ({ r with _value: int(v: r._value) }))\n |\u003e aggregateWindow(every: 1m, fn: mean, createEmpty: false)\n |\u003e yield(name: \"mean\")",