I have one topic for alert evaluation. We are working with a ticketing system. So I need to get an update every 2 weeks (14 days) when the count of the alarms with the same prefix, name, code name etc are being generated.
Example: Setting threshold to 5 alarms. For the last 2 weeks’ alarm, “XXXX” logged 6 times, so we should receive an Email notification regarding it.
The problem is how can we escape FOR in the evaluation because we just need to have a notification for this breached threshold of alarms. We need to set just a period of 2 weeks where we receive notification only when the threshold is breached.
I saw that there is a possible way to set FOR 0m but when I click “save” it doesn’t save it and it stays with the same for and it doesn’t give me to put any number smaller than the “Evaluate every” XXX amount of time.
Kindly advise if there is a possible way to not use FOR in the evaluation.