{ "alert_lag": 0, "alert_period": "5", "base_search": "sourcetype=\"*Win*:Application\" Type=\"Error\" | eval CrashOrHang = if(EventCode >= 1000 AND EventCode <= 1011, EventCode, null())", "description": "", "entity_filter_field": "host", "entity_split_field": "host", "is_filter_entities_to_service": true, "is_split_by_entity": true, "key": "da-itsi-cp-citrix-ta-itsi-citrix-xd7-appcrashhang", "metric_qualifier": "", "metrics": [ { "aggregate_statop": "avg", "entity_statop": "count", "fill_gaps": "custom_value", "gap_custom_alert_value": "0", "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "key": "crashed-or-hung", "threshold_field": "CrashOrHang", "title": "# Crashed or Hung", "unit": "" }, { "aggregate_statop": "avg", "entity_statop": "count", "fill_gaps": "custom_value", "gap_custom_alert_value": "0", "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "key": "total-errors", "threshold_field": "_time", "title": "Total Errors", "unit": "" } ], "search_alert_earliest": "5", "title": "TA-ITSI-CITRIX-XD7-AppCrashHang", "version": "0.0.33" }