False positive alerts about alerting HOT 6 CLOSED

@Pupkur
I am not sure if I understand correctly, but you're trying to say that the monitor is taking too much time to execute the query and trigger the alarm ?

could you provide few more information, that would be helpful to understand it better.

from alerting.

Yes. Monitor taking too much time to execute the query and trigger alarm.

from alerting.

@Pupkur Thanks for the information.

Could you check what is the query performance when you actually run the query ?

You can do this by following steps :

1. Edit the existing monitor
2. Click on the Run button
3. Check the performance section ?

P.S Also, make sure you're following best practices for the ES query as you're using query_string inside query, it is sometime too expensive. [Reference] I would sus(https://www.elastic.co/guide/en/elasticsearch/reference/6.7/query-dsl-query-string-query.html)

from alerting.

Query duration
6104-15840 ms
I think the problem is in garbage collection. The issue appears when it`s running.

from alerting.

Hi @Pupkur,

Just checking in if this was still an issue with newer version of the Alerting plugin?
We do have query timeouts on the input queries and if it does in fact timeout it will enter ERROR state which will automatically trigger the notification/alert.

from alerting.

Feel free to reopen, if this is still an issue.

from alerting.