timeseries { count(`unexpecteddowntime`), value.A = avg(`unexpecteddowntime`) }, by: {`site` }
| fieldsAdd arrayAvg(`count(\`unexpecteddowntime\`)`)
| filter value.A > 30
i am trying to alert whenever the unexpecteddowntime goes above 30 on certain units and group it to site level to avoid multiple alert for same site , but i want to list the units in the email , how can i add it to the DQL , unexpecteddowntime is the metric key and site , units are dims
