Can I create an alert in kapacitor which is triggered when the value is below a specific limit for more than 10 minutes

[ashish02]

I want to create an alert for the system when the value is below specific limit. But I do not want it to throw alert every time it happens. I only want to create a alert when the value stays below the limit for a certain amount of time.
It could be something with the combination of threshold and relative alert where the value is below threshold AND the change in last 10 min is 0%.
But I am having difficulty in creating such alert.

[Anaisdg]

Hello @ashish02,
Welcome!
I found some threads with code examples that might be useful to you.

Alerting if mean of a value is above a threshold value for a certain period of time

Actually this is very straight forward and can be achieved via the chronograf alerts UI for creating stream alerts. I didn’t have to even write the TICK script from scratch which definetely impressed me. I didn’t know previously that relative alerts are supported out of the box. So basically the following TICK script was generated by chronograf, which I later customized. var db = 'api_requests' var rp = 'autogen' var measurement = 'requests_stats' var groupBy = ['api_path'] var whereFilter…

Kapacitor - if value exceeds threshold for specified duration

Hi guys, As I’m diving into Kapacitor more and more, I’m trying to refine my checks and alerts. One thing I’d like to check if you if a value meets a criteria (e.g. Exceeds a value, within s range) for a duration. This will help me exclude flapping and better get an idea if a metric has spiked for an extended period. Currently im doing this by using timeShift a few times and comparing, but it’s messy and I’m sure there must be a better way. Is there a nice easy way to do this? One example wou…

Please let me know if you’re still having trouble after looking through these.
Thank you :).

[ashish02]

Based on the thread you provided I create this relative alert. As visible in the graph the past value is 1 and current value is 0 thus the change is -1 which is less than 0. But I am not getting alert for this. Please help.

var db = ‘test’

var rp = ‘autogen’

var measurement = ‘kapacitor’

var groupBy =

var whereFilter = lambda: TRUE

var period = 10s

var every = 30s

var name = ‘Test-Alert’

var idVar = name

var message = ‘TEST TICK ALERT 10 minutes’

var idTag = ‘alertID’

var levelTag = ‘level’

var messageField = ‘message’

var durationField = ‘duration’

var outputDB = ‘chronograf’

var outputRP = ‘autogen’

var outputMeasurement = ‘alerts’

var triggerType = ‘relative’

var shift = 1m

0s

var crit = 0

var data = stream
|from()
.database(db)
.retentionPolicy(rp)
.measurement(measurement)
.groupBy(groupBy)
.where(whereFilter)
|window()
.period(period)
.every(every)
.align()
|max(‘new’)
.as(‘value’)

var past = data
|shift(shift)

var current = data

var trigger = past
|join(current)
.as(‘past’, ‘current’)
|eval(lambda: float(“current.value” - “past.value”))
.keep()
.as(‘value’)
|alert()
.crit(lambda: “value” < crit)
.message(message)
.id(idVar)
.idTag(idTag)
.levelTag(levelTag)
.messageField(messageField)
.durationField(durationField)
.slack()
.channel(‘TestGrafanaAlerts’)
.username(‘TICK’)

trigger
|eval(lambda: float(“value”))
.as(‘value’)
.keep()
|influxDBOut()
.create()
.database(outputDB)
.retentionPolicy(outputRP)
.measurement(outputMeasurement)
.tag(‘alertName’, name)
.tag(‘triggerType’, triggerType)

trigger
|httpOut(‘output’)