# Trigger alert for individual cpu core crossing 95% utilization

**URL:** <https://discuss.elastic.co/t/trigger-alert-for-individual-cpu-core-crossing-95-utilization/389959>\
**Category:** Kibana\
**Created:** [August 27, 2026, 6:13pm UTC](https://discuss.elastic.co/t/trigger-alert-for-individual-cpu-core-crossing-95-utilization/389959 "2026-08-27T18:13:40Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![PRASHANT\_MEHTA](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prashant_mehta/32/101764_2.png) [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Post date:** [August 27, 2026, 6:13pm UTC](https://discuss.elastic.co/t/trigger-alert-for-individual-cpu-core-crossing-95-utilization/389959/1 "2026-08-27T18:13:40Z")

</div>

I have a simple requirement to trigger alert if any of the CPU core breach 95% threshold:(using alert/rule in kibana)

Challenge facing: system.core.total.pct this field gives abnormal values to be used like 1000, 4700, etc. Attached SC.

**Please do not report on CPU total values. Use individual CPU data.**

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/b/cb630a57e5d8f9df1a71a3ecccb23321f696534b.png)

---

<div class="post-metadata">

**Author:** ![erikg](https://avatars.discourse-cdn.com/v4/letter/e/91b2a8/32.png) [@erikg](https://discuss.elastic.co/u/erikg)\
**Post date:** [August 27, 2026, 10:13pm UTC](https://discuss.elastic.co/t/trigger-alert-for-individual-cpu-core-crossing-95-utilization/389959/2 "2026-08-27T22:13:48Z")

</div>

what version of elastic you on

---

<div class="post-metadata">

**Author:** ![PRASHANT\_MEHTA](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prashant_mehta/32/101764_2.png) [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Post date:** [August 28, 2026, 12:19pm UTC](https://discuss.elastic.co/t/trigger-alert-for-individual-cpu-core-crossing-95-utilization/389959/3 "2026-08-28T12:19:32Z")

</div>

Version 8.19.16, I am using elastic agent to monitor this.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/8/5828d7d8804ded240ca67ce68d2657b5f6c29b97.png)