I know this question has been asked before, but I've searched both Thwack and Google and cannot seem to locate the thread, so here it is again. I would like to create an alert for failed collections in VMAN. I have the following for the configuration data, but it doesn't seem to work for the performance data.
(cluster.timestamp:[* TO now-12hours])
Can someone tell me what the alert needs to be for the performance data? I tried the following using the performance data radio button but it doesn't work. It is reporting that none of my clusters have data although I can verify that they do.
(cluster.timestamp:[* TO now-30minutes])