look back period

[lukedevon]

Hi

Can you help me to understand the lookback period when creating an Alert?

For example;
Check Interval - 2m
Look back period - 2m

Thresholds - Warning -1, Critical 2

suppose I am monitoring a text "MYSQL". Since every 2mins, repeating the log checking for the defined text, nls was able to capture it once and it is marked as Warning.
in what case, the look-back period is starting? does it activate only if the text has been captured?

Thank you
Luke

[cdienger]

The look back period controls how far back to search for the text. In your scenario the query would be run every two minutes and each time it would look at just the previous two minutes.