timeseries valor = max(Nome_metrica),
by:{device.address, device.name, dt.metrics.source, device.port, device}
| fieldsAdd lista_limpa = arrayRemoveNulls(valor)
| fieldsAdd lista = arrayReverse(lista_limpa)
| fieldsAdd
v_atual = lista[0],
v_anterior = lista[1]
| summarize
total_atual = last(v_atual),
total_anterior = last(v_anterior)
| fieldsAdd
total_atual = coalesce(total_atual, 0),
total_anterior = coalesce(total_anterior, 0)
| fieldsAdd
diff = total_atual - total_anterior
| fieldsAdd
percentual = if(total_anterior > 0, (diff / total_anterior) * 100, else: 0)
| fieldsAdd
status_msg = if(percentual >= 20, "🔴 PROBLEMA", else: if(percentual >= 10, "🟡 ALERTA", else: "🟢 ROTINA"))
| fields
total_atual,
total_anterior,
crescimento = concat(round(percentual, decimals:1), "%"),
status = status_msg
