You can edit the threshold value of a specific resource. When the threshold value is edited, the updated value is immediately applied to the time-series data that is imported after the update.
For example, see the following scenarios.
Alert definition criteria = 1/1 (1 violation in 1 minute)
Alert definition threshold = less than 20.
Alert definition is attached to resources R1, R2, and R3, and data importer is importing the time-series data of resources R1, R2, and R3.
- Scenario one Before the threshold is updated.
Series of R1, R2, and R3:
(R1) t1----------- 20------------t2
(R2) t1----------- 20------------t2---------- 20------------t3
(R3) t1----------- 20------------t2---------- 20------------t3
Where t1, t2, and t3 are the data time stamps.
In the above series, the threshold value is mentioned between two time stamps.
Here, threshold 20 is used during time window t1 to t2 for resources R1, R2, and R3.
The same threshold value 20 is also used during time window t2 to t3 for resources R2 and R3.
If the threshold is updated to 40, then this updated value is applied to the data that comes after the threshold is updated.
- Scenario two After the threshold is updated.
Series of R1, R2, and R3:-
(R1) t1------ ---20----------t2-------- ---40---------------t3-------40---------t4
(R2) t1------ ---20----------t2------------20---------------t3---- --40---------t4
(R3) t1--------- 20----------t2------------20---------------t3-------40---------t4
In the above series, the updated threshold value is used immediately for alert evaluation after the update.
Here, threshold 40 is used during time window t2 to t4 for resource R1.
The same threshold value 40 is used during time window t3 to t4 for resources R2 and R3.