Hi, I'm trying to create Watcher Alert for dropped packets system.network.in.dropped (the system metrics are shipped with Metricbeats) if more than 50 dropped packets are present alert should be generated. To do this I need calculate difference between current and previous values.
What is the best way of doing it?
i hope derivative aggregation might help in this situation.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.
