07-03-2025 04:04 AM - edited 07-03-2025 04:06 AM
Just wanted to share this with everyone - i am sure it might be useful if not already deployed. Feel free to comment on possible enhancements/ recommendations.
The Query below will calculate the daily ingestion per GB and will output 'TRUE' if it exceeds 80% of daily ingestion.
dataset = metrics_source
| comp sum(total_size_bytes ) as total_ingestion_gb
| alter total_ingested_gb = divide(round(multiply(divide(total_ingestion_gb, pow(to_number(1024), to_number(3))), 100)), 100)
| alter is_exceeding_80_percent = if(total_ingested_gb <XX>, "TRUE", "FALSE")
| fields total_ingested_gb, is_exceeding_80_percent
| filter is_exceeding_80_percent = "TRUE"
(just replace <XX> with your 80% value in GB)
In the above example, if Daily ingestion is above <XX>GB per day, it should output as TRUE.
Then create a correlation rule that runs once a day if if exceeded, will generate an Alert if TRUE.
Then set a Trigger condition/automation to notify (in my case via email) the persons responsible.
tested seems to work
rgds
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
