Thanks for the link @Ajeet.Khan. I had a look at your condition and noticed it is using Event Flow for its aggregation method.
Event Flow is used for data that arrives frequently and relatively consistently. If you use the query from your condition, you’ll see your data arrives very infrequently. In fact, I am not seeing any violations of your threshold within the last 30 days.
If your data indeed is infrequent, I would recommend changing your aggregation method to Event Timer which is used for data arriving infrequently or with large gaps in between.
I noticed that your query is using
'%OID failed to return results%' but the erroring message isn’t exactly
OID failed to return results as there are several characters between the
OID and the
failed to return results which is another reason why your condition isn’t working. You’ll need to use something like
%OID%failed to return results%.
I’m also including an Explorer’s Hub post regarding the new aggregation methods and how to determine which one to use:
Relic Solution: How Can I Figure Out Which Aggregation Method To Use?
I hope this helps!