<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Metric anomalies with 2 different metrics tracking in DQL</title>
    <link>https://community.dynatrace.com/t5/DQL/Detect-Metric-Anomalies-Across-Multiple-Metrics-in-Dynatrace/m-p/224503#M273</link>
    <description>&lt;P&gt;Probably not the answer you are looking for, but you can combine metrics when you create SLOs and then set custom alerts on these SLOs.&lt;/P&gt;&lt;P&gt;Unfortunately, SLOs do not support dimensions so you need 1 SLO for each host (and consequently, 1 metric event per host).&lt;/P&gt;&lt;P&gt;The below SLO example adds CPU usage and Memory usage of a specific host "hostname" and divides by 2. When the SLO reaches 90% it means both CPU and Memory are at their 90% usage:&lt;/P&gt;&lt;P&gt;(builtin:host.cpu.usage:filter(and(or(in("dt.entity.host",entitySelector("type(host),entityName.equals(~"hostname~")"))))):splitBy("dt.entity.host")+builtin:host.mem.usage:filter(and(or(in("dt.entity.host",entitySelector("type(host),entityName.equals(~"hostname~")"))))):splitBy("dt.entity.host"))/2&lt;/P&gt;</description>
    <pubDate>Tue, 03 Oct 2023 19:14:27 GMT</pubDate>
    <dc:creator>ebourlas</dc:creator>
    <dc:date>2023-10-03T19:14:27Z</dc:date>
    <item>
      <title>Detect Metric Anomalies Across Multiple Metrics in Dynatrace</title>
      <link>https://community.dynatrace.com/t5/DQL/Detect-Metric-Anomalies-Across-Multiple-Metrics-in-Dynatrace/m-p/224494#M272</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;Currently when you make a custom metric alert, it can only be based off of one metric. For instance, you can't tell an alert to go off if there is both a cpu threshold of 95%&amp;nbsp;&lt;STRONG&gt;and&lt;/STRONG&gt; a memory threshold of 95%. You can only tie one metric to each alert that you make.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;With using grail / dql, are there any planned changes for this?&lt;/P&gt;
&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Fri, 19 Dec 2025 09:32:27 GMT</pubDate>
      <guid>https://community.dynatrace.com/t5/DQL/Detect-Metric-Anomalies-Across-Multiple-Metrics-in-Dynatrace/m-p/224494#M272</guid>
      <dc:creator>danielD</dc:creator>
      <dc:date>2025-12-19T09:32:27Z</dc:date>
    </item>
    <item>
      <title>Re: Metric anomalies with 2 different metrics tracking</title>
      <link>https://community.dynatrace.com/t5/DQL/Detect-Metric-Anomalies-Across-Multiple-Metrics-in-Dynatrace/m-p/224503#M273</link>
      <description>&lt;P&gt;Probably not the answer you are looking for, but you can combine metrics when you create SLOs and then set custom alerts on these SLOs.&lt;/P&gt;&lt;P&gt;Unfortunately, SLOs do not support dimensions so you need 1 SLO for each host (and consequently, 1 metric event per host).&lt;/P&gt;&lt;P&gt;The below SLO example adds CPU usage and Memory usage of a specific host "hostname" and divides by 2. When the SLO reaches 90% it means both CPU and Memory are at their 90% usage:&lt;/P&gt;&lt;P&gt;(builtin:host.cpu.usage:filter(and(or(in("dt.entity.host",entitySelector("type(host),entityName.equals(~"hostname~")"))))):splitBy("dt.entity.host")+builtin:host.mem.usage:filter(and(or(in("dt.entity.host",entitySelector("type(host),entityName.equals(~"hostname~")"))))):splitBy("dt.entity.host"))/2&lt;/P&gt;</description>
      <pubDate>Tue, 03 Oct 2023 19:14:27 GMT</pubDate>
      <guid>https://community.dynatrace.com/t5/DQL/Detect-Metric-Anomalies-Across-Multiple-Metrics-in-Dynatrace/m-p/224503#M273</guid>
      <dc:creator>ebourlas</dc:creator>
      <dc:date>2023-10-03T19:14:27Z</dc:date>
    </item>
  </channel>
</rss>

