{
    "alert_lag": 30,
    "alert_period": "5",
    "base_search": "| mstats sum(\"FunctionExecutionCount\") as azure_function_execution,\nsum(\"FunctionExecutionUnits\") as azure_function_usagecost,\navg(\"AverageMemoryWorkingSet\") as azure_function_memory,\nsum(\"Http5xx\") as azure_function_errors,\nsum(\"BytesReceived\") as azure_function_bytes_received,\nsum(\"BytesSent\") as azure_function_bytes_sent,\nwhere primary_aggregation_type=true AND is_Azure_Function=true AND `itsi-cp-observability-indexes` by subscription_id, azure_region, azure_resource_name, azure_resource_id span=15m \n| eval ITSIUniqueId  = subscription_id + azure_region + azure_resource_name |  rename azure_resource_name as FunctionName |table _time, ITSIUniqueId, azure_resource_id, azure_function_execution, azure_function_usagecost, azure_function_memory, azure_function_errors, azure_function_bytes_received, azure_function_bytes_sent",
    "description": "",
    "entity_filter_field": "ITSIUniqueId",
    "entity_split_field": "ITSIUniqueId",
    "is_filter_entities_to_service": true,
    "is_split_by_entity": true,
    "key": "da-itsi-cp-splunk-observability-sim-cloud-azure-functions",
    "metric_qualifier": "",
    "metrics": [
        {
            "aggregate_statop": "avg",
            "entity_statop": "avg",
            "fill_gaps": "null_value",
            "gap_custom_alert_value": "0",
            "gap_severity": "unknown",
            "gap_severity_color": "#CCCCCC",
            "gap_severity_color_light": "#EEEEEE",
            "gap_severity_value": "-1",
            "key": "azure-function-5xx-errors",
            "threshold_field": "azure_function_errors",
            "title": "Azure Function 5xx Errors",
            "unit": ""
        },
        {
            "aggregate_statop": "avg",
            "entity_statop": "avg",
            "fill_gaps": "null_value",
            "gap_custom_alert_value": "0",
            "gap_severity": "unknown",
            "gap_severity_color": "#CCCCCC",
            "gap_severity_color_light": "#EEEEEE",
            "gap_severity_value": "-1",
            "key": "azure-function-bytes-received",
            "threshold_field": "azure_function_bytes_received",
            "title": "Azure Function Bytes Received",
            "unit": "b"
        },
        {
            "aggregate_statop": "avg",
            "entity_statop": "avg",
            "fill_gaps": "null_value",
            "gap_custom_alert_value": "0",
            "gap_severity": "unknown",
            "gap_severity_color": "#CCCCCC",
            "gap_severity_color_light": "#EEEEEE",
            "gap_severity_value": "-1",
            "key": "azure-function-bytes-sent",
            "threshold_field": "azure_function_bytes_sent",
            "title": "Azure Function Bytes Sent",
            "unit": "b"
        },
        {
            "aggregate_statop": "avg",
            "entity_statop": "avg",
            "fill_gaps": "null_value",
            "gap_custom_alert_value": "0",
            "gap_severity": "unknown",
            "gap_severity_color": "#CCCCCC",
            "gap_severity_color_light": "#EEEEEE",
            "gap_severity_value": "-1",
            "key": "azure-function-executions",
            "threshold_field": "azure_function_execution",
            "title": "Azure Function Executions",
            "unit": ""
        },
        {
            "aggregate_statop": "avg",
            "entity_statop": "avg",
            "fill_gaps": "null_value",
            "gap_custom_alert_value": "0",
            "gap_severity": "unknown",
            "gap_severity_color": "#CCCCCC",
            "gap_severity_color_light": "#EEEEEE",
            "gap_severity_value": "-1",
            "key": "azure-function-memory",
            "threshold_field": "azure_function_memory",
            "title": "Azure Function Memory",
            "unit": ""
        },
        {
            "aggregate_statop": "avg",
            "entity_statop": "avg",
            "fill_gaps": "null_value",
            "gap_custom_alert_value": "0",
            "gap_severity": "unknown",
            "gap_severity_color": "#CCCCCC",
            "gap_severity_color_light": "#EEEEEE",
            "gap_severity_value": "-1",
            "key": "azure-function-usagecost",
            "threshold_field": "azure_function_usagecost",
            "title": "Azure Function Usagecost",
            "unit": ""
        }
    ],
    "search_alert_earliest": "15",
    "title": "SIM_cloud_azure_functions",
    "version": "0.0.38"
}