Alert email link lookback time interval
Posted: Thu Jul 16, 2015 11:24 am
Hi,
When I get my alert email, I get link on the bottom that will get me to the correct dashboard but will be time-limited to the lookback period on the alert to now. So lets say I have an alert that runs every minute with a 1 minute lookback so when I click on the dashboard it gives me all the right filters but the @timestamp field is liminuted to now-1m. Lets say an alert comes in at 11:00 (meaning the event happened somewhere in the 10:59th minute) and I'm in a meeting. I get back to my desk at 11:30 and see the alert, click the link at 11:31, and it will take me to the correct dashboard but for 11:30-11:31 window, not the 10:59-11:00 window when the actual alert happened. In short - wouldn't be infinitely more useful to see the actual alert when it happened in the context that it happened (say +/- 15 minutes) than to see the rather irrelevant most recent minute of that dashboard?
Is there a way to make this happen, or is this a future feature request?
Thanks.
When I get my alert email, I get link on the bottom that will get me to the correct dashboard but will be time-limited to the lookback period on the alert to now. So lets say I have an alert that runs every minute with a 1 minute lookback so when I click on the dashboard it gives me all the right filters but the @timestamp field is liminuted to now-1m. Lets say an alert comes in at 11:00 (meaning the event happened somewhere in the 10:59th minute) and I'm in a meeting. I get back to my desk at 11:30 and see the alert, click the link at 11:31, and it will take me to the correct dashboard but for 11:30-11:31 window, not the 10:59-11:00 window when the actual alert happened. In short - wouldn't be infinitely more useful to see the actual alert when it happened in the context that it happened (say +/- 15 minutes) than to see the rather irrelevant most recent minute of that dashboard?
Is there a way to make this happen, or is this a future feature request?
Thanks.