We are trying to set up an alert that compares the total events from the previous 24 hours to the the total number of events in the 24 hours before that. I can run a query that returns the percentage difference using
COMPARE WITH but it seems we cannot use these keywords when creating an alert condition.
This is the query I am using in Insights:
SELECT COUNT(*) FROM main_decision WHERE appName='main-service' SINCE 1 day ago COMPARE WITH 1 day ago
We want an alert when the events drop by 30% or more. Is this possible and could someone point me in the right direction?