Container high low change CPU usage
info

Description This alert rule monitors the absolute change in CPU usage within a time window and triggers an alert when the change exceeds 25%.
Query
>>>
	
				
					(
				
			
				
					
					
						abs
					
				
			
				
					((sum by (instance, name) (
				
			
				
					
					
						rate
					
				
			
				
					(
				
			
				
					
				
			
				
					{name!=""}[1m])) * 100) - (sum by (instance, name) (
				
			
				
					
					
						rate
					
				
			
				
					(
				
			
				
					
				
			
				
					{name!=""}[1m] offset 1m)) * 100)) or 
				
			
				
					
					
						abs
					
				
			
				
					((sum by (instance, name) (
				
			
				
					
					
						rate
					
				
			
				
					(
				
			
				
					
				
			
				
					{name!=""}[1m])) * 100) - (sum by (instance, name) (
				
			
				
					
					
						rate
					
				
			
				
					(
				
			
				
					
				
			
				
					{name!=""}[5m] offset 1m)) * 100))) > 25
				
			
    
Query Explanation

The rule calculates each container’s CPU usage percentage (using rate(container_cpu_usage_seconds_total)), compares the current 1‑minute rate to the rate from one minute earlier (or to a 5‑minute rate offset by one minute), takes the absolute difference, and fires when that change is greater than 25 %.

Get Alert
Download
Copy to Clipboard