Multiple filters when creating a Metric Threshold

Hi @vsabado

I appreciate the hammering, its all good.

But I also know from solving many many of these topics that often when something "obvious" does not work, how to fix it is often non-obvious and so it requires some detailed questions and answers, some of which may or may not be linear.

So here are a couple of things I am considering.

From above

1st if you actually have a space there, it may not (probably not) be picking up that data view, There was a bug on that a while back that I think has been fixed now to not allow spaces in older releases (which you may be on) I think it just ignored the index pattern that can after the space so it is probably not picking up that data view

Newer version

2nd that entry should be an index pattern not a Data view.

3rd You probably need to create a new index pattern specifically for what you want

and 4th probably the reason why the multiple filters are not working is because the alert query is not actually running against the APM data you think it is (I am almost positive of that) it is running against one of the other index patterns and not the one you added and all those fields for the filter do not exist in the other patterns.

So lets try a few things and see if we can get you unblocked.

1st Go To Stack Management Data View and Create and new Data View like this.
This assumes you did not change the names of the APM Indices.

2nd Go to Infrastructure (Or Inventory) Under observability -> Settings and set the following

Only set this

Check Discover Make Sure it has the data you think it does

Mine is different but there are 2 filters... make sure you KQL works here

Then try your Metric Threshold Alert

Then if that works you can go back and add the metric index patterns to the Inventory / Infrastructure setting but no spaces