Hi, Im running Grafana v11.4 and having a hard time figuring out how to calculate the resolved/closed time for an alert. The resolved time is not the same as the acknowledged time.
Example Event:
{ "value": "0", "timestamp": 1739791331, "triggerid": "7766392", "eventid": "16109757", "name": "TEST ALERT - SSH service is down", "severity": "4", "acknowledged": "1", "acknowledges": [ { "acknowledgeid": "897", "action": "2", "clock": "1739791419", "eventid": "16109757", "message": "", "new_severity": "0", "old_severity": "0", "userid": "26", "user": "", "name": "", "surname": "", "time": "2025-02-17 13:23:39" } ], "tags": [ { "tag": "scope", "value": "availability" }, { "tag": "component", "value": "application" }, { "tag": "owner", "value": “Dev Backend+Platform" }, { "tag": "service", "value": "Node" }, { "tag": "__message_ts_dev-alerts-test", "value": "1739791349.596189" }, { "tag": "__channel_id_dev-alerts-test", "value": "CVS42F" }, { "tag": "__message_link_dev-alerts-test", "value": "https://company.slack.com/archives/CVS42F/p17397" } ], "suppressed": "0", "description": "SAMPLE ALERT - SSH service is down", "comments": "", "groups": [ { "groupid": "5", "name": "Discovered hosts" }, { "groupid": "28", "name": "Environments/Test" }, { "groupid": "31", "name": "Region types/company" }, { "groupid": "46", "name": "Servers" }, { "groupid": "97", "name": "Regions/test.companynet" } ], "hosts": [ { "description": "", "host": "node-1t.test.company.net", "hostid": "15188", "maintenance_status": "0", "name": "node-1t.test.company.net", "proxy_hostid": "14596", "proxy": "" } ], "items": [ { "itemid": "1768511", "key_": "net.tcp.service[ssh]", "lastvalue": "1", "name": "SSH service is running" } ], "url": "", "expression": "max(/node-1t.test.company.net/net.tcp.service[ssh],15m)=0", "correlation_mode": "0", "correlation_tag": "", "manual_close": "1", "state": "0", "error": "", "hostInMaintenance": false, "maintenance": false, "showAckButton": true, "datasource": { "type": "alexanderzobnin-zabbix-datasource", "uid": "zabbix" } }
Is it possible?