For the "Job Duration Unusual" alert, please add an additional parameter.
Deviates from baseline by more than [ ] %
and ran for at least [ ] seconds.
Similar to the CPU utilization unusual.
For a really short running job, a change of just a few seconds could be a huge deviation %, but it doesn't concern me unless it runs for more than xxx seconds.
Another option (better in my opinion) would be:
Deviates from baseline by more than [ ] %
or by [ ] seconds - whichever is greater
Deviates from baseline by more than [ ] %
and ran for at least [ ] seconds.
Similar to the CPU utilization unusual.
For a really short running job, a change of just a few seconds could be a huge deviation %, but it doesn't concern me unless it runs for more than xxx seconds.
Another option (better in my opinion) would be:
Deviates from baseline by more than [ ] %
or by [ ] seconds - whichever is greater