# How come APM Alert for Failed Transaction Rate Threshold shows "Ok" instead of "Active"?

**URL:** <https://discuss.elastic.co/t/how-come-apm-alert-for-failed-transaction-rate-threshold-shows-ok-instead-of-active/317640>\
**Category:** APM\
**Tags:** ui\
**Created:** [October 27, 2022, 6:28pm UTC](https://discuss.elastic.co/t/how-come-apm-alert-for-failed-transaction-rate-threshold-shows-ok-instead-of-active/317640 "2022-10-27T18:28:26Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![learningelastic](https://avatars.discourse-cdn.com/v4/letter/l/958977/32.png) [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Post date:** [October 27, 2022, 6:28pm UTC](https://discuss.elastic.co/t/how-come-apm-alert-for-failed-transaction-rate-threshold-shows-ok-instead-of-active/317640/1 "2022-10-27T18:28:26Z")

</div>

I'm exploring the APM Alert Failed Transaction Rate Threshold feature but I can't seem to put the rule into an "Active" state.

So for example, I have an APM service that shows Failed Transaction Rate of 48% for about 30 minutes. See these screenshots:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/9/499a038a8b484f36d2e14f49828c329d024427a3.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/e/deef02be490ad3464259ca102518ee500b8b1369.png)

So I created a rule like this:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/3/4/3426c2c0b7b32ab7c58bc69bea28cf1570826571.png)

But the status is always "Ok". How do I get the status to "Active"? See screenshot below:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/8/9879cd8fd98105703eaf4c8315363b06765751fa.png)

* * *

UPDATE

It's been about 7 hours since I posted the question above, which is also the time I started the rule. As of now, I see that the Failed Transaction Rate Threshold was only triggered 11 times and it recovered 11 times, as shown in this image:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/6/465be924a6643a997ba4db55f4d62a853d121f7d.png)

But I can see that the failure rate was consistently 48% during the past 7 hours:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/c/4c8579449dc44d16aa81b99d987269b1347d6e02.png)

Why does the alert rule say it recovered?

---

<div class="post-metadata">

**Author:** ![dgieselaar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgieselaar/32/46947_2.png) [@dgieselaar](https://discuss.elastic.co/u/dgieselaar)\
**Post date:** [October 28, 2022, 9:46am UTC](https://discuss.elastic.co/t/how-come-apm-alert-for-failed-transaction-rate-threshold-shows-ok-instead-of-active/317640/2 "2022-10-28T09:46:14Z")

</div>

Your window is likely too short. Data can often be delayed for a bit, and the shorter your window is, the more volatile the rule will be (ie, it will activate & recover quickly and many times), because it reports over incomplete data. The preview does not take this into account (delayed data). Can you try setting a larger time window?

---

<div class="post-metadata">

**Author:** ![learningelastic](https://avatars.discourse-cdn.com/v4/letter/l/958977/32.png) [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Post date:** [October 28, 2022, 11:58am UTC](https://discuss.elastic.co/t/how-come-apm-alert-for-failed-transaction-rate-threshold-shows-ok-instead-of-active/317640/3 "2022-10-28T11:58:09Z")

</div>

Yes, that worked! Here's a screenshot of the rule that worked, notice the active state is 12 and recovered is 11

![image](https://us1.discourse-cdn.com/elastic/original/3X/e/0/e0fc4eaf0787940f56e7078600406b6ef79e0aa0.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 25, 2022, 11:58am UTC](https://discuss.elastic.co/t/how-come-apm-alert-for-failed-transaction-rate-threshold-shows-ok-instead-of-active/317640/4 "2022-11-25T11:58:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
