# Deadman giving false alerts

**URL:** <https://community.influxdata.com/t/deadman-giving-false-alerts/19142>\
**Category:** Systems\
**Created:** [March 30, 2021, 3:55am UTC](https://community.influxdata.com/t/deadman-giving-false-alerts/19142 "2021-03-30T03:55:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![pavan\_kumar5](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/pavan_kumar5/32/7084_2.png) [@pavan\_kumar5](https://community.influxdata.com/u/pavan_kumar5)\
**Post date:** [March 30, 2021, 3:55am UTC](https://community.influxdata.com/t/deadman-giving-false-alerts/19142/1 "2021-03-30T03:55:41Z")

</div>

I usee deadman to alert when there is data loss(missing) . But its giving me the false alerts though the data is available in the influxdb.  
Can anyone help me regarding this.

The sample tick script is :  
Var data = stream  
|from()  
.database(‘telegraf’)  
.retentionPolicy(‘ds\_3y’)  
. measurement(‘cpu’)  
.groupBy(\*)  
|mean(‘usage\_idle’)  
.as(“value1”)  
data  
|deadman(0.0,1m)  
.message(‘there is a data loss’)  
.log(’/tmp/alerts/sample.log’)

That is the script and i am getting false alerts. Help me guys…

---

<div class="post-metadata">

**Author:** ![Anaisdg](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/anaisdg/32/6401_2.png) [@Anaisdg](https://community.influxdata.com/u/Anaisdg)\
**Post date:** [March 31, 2021, 8:16pm UTC](https://community.influxdata.com/t/deadman-giving-false-alerts/19142/2 "2021-03-31T20:16:37Z")

</div>

Hello @pavan_kumar5,  
I’ll share your question with the Kapacitor experts because I don’t know your script looks good to me.  
Does this simple deadman work?

```auto
var data = stream
    |from()
        .database('telegraf')
        .retentionPolicy('ds_3y)
        .measurement('cpu')
        .groupBy(*)
    |deadman(o.0, 1m)
        .id('{{ index .Tags "node" }}')
        .message('Server {{ .ID }} is OFFLINE')
        .log()

```

---

<div class="post-metadata">

**Author:** ![Emrys\_Landivar](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/emrys_landivar/32/4316_2.png) [@Emrys\_Landivar](https://community.influxdata.com/u/Emrys_Landivar)\
**Post date:** [April 20, 2021, 2:15pm UTC](https://community.influxdata.com/t/deadman-giving-false-alerts/19142/3 "2021-04-20T14:15:12Z")

</div>

the 1 minute deadman will trigger any time any comibination of tags of data is more than 1 minute late, I don’t think it is what you want.

---

<div class="post-metadata">

**Author:** ![pavan\_kumar5](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/pavan_kumar5/32/7084_2.png) [@pavan\_kumar5](https://community.influxdata.com/u/pavan_kumar5)\
**Post date:** [April 21, 2021, 5:22am UTC](https://community.influxdata.com/t/deadman-giving-false-alerts/19142/4 "2021-04-21T05:22:41Z")

</div>

@Emrys_Landivar Thanks for replying and i changed the time to 5m and still i am getting the false alerts.  
The scenario is the alerts aren’t coming at first when there is data coming and when the data isn’t there it is starting giving alerts and not stoping the alerts though the data is made available and it’s continuously sending the alerts thats the issue.