I have a simple requirement to trigger alert if any of the CPU core breach 95% threshold:(using alert/rule in kibana)
Challenge facing: system.core.total.pct this field gives abnormal values to be used like 1000, 4700, etc. Attached SC.
Please do not report on CPU total values. Use individual CPU data.

