Hello @GlebCA ,
if you are specifically interested in the cases when the event count goes down, you should use low_count
.
To trigger alerts when the event count drops to 0, it's easiest to use Kibana alerting and not ML.
Hello @GlebCA ,
if you are specifically interested in the cases when the event count goes down, you should use low_count
.
To trigger alerts when the event count drops to 0, it's easiest to use Kibana alerting and not ML.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.