{"action":"created","issue":{"url":"https://api.github.com/repos/bosun-monitor/bosun/issues/1891","repository_url":"https://api.github.com/repos/bosun-monitor/bosun","labels_url":"https://api.github.com/repos/bosun-monitor/bosun/issues/1891/labels{/name}","comments_url":"https://api.github.com/repos/bosun-monitor/bosun/issues/1891/comments","events_url":"https://api.github.com/repos/bosun-monitor/bosun/issues/1891/events","html_url":"https://github.com/bosun-monitor/bosun/issues/1891","id":173817063,"number":1891,"title":"escount band() function?","user":{"login":"calh","id":1163502,"avatar_url":"https://avatars.githubusercontent.com/u/1163502?v=3","gravatar_id":"","url":"https://api.github.com/users/calh","html_url":"https://github.com/calh","followers_url":"https://api.github.com/users/calh/followers","following_url":"https://api.github.com/users/calh/following{/other_user}","gists_url":"https://api.github.com/users/calh/gists{/gist_id}","starred_url":"https://api.github.com/users/calh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/calh/subscriptions","organizations_url":"https://api.github.com/users/calh/orgs","repos_url":"https://api.github.com/users/calh/repos","events_url":"https://api.github.com/users/calh/events{/privacy}","received_events_url":"https://api.github.com/users/calh/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/bosun-monitor/bosun/labels/bosun","name":"bosun","color":"fef2c0"},{"url":"https://api.github.com/repos/bosun-monitor/bosun/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-08-29T16:39:08Z","updated_at":"2016-08-29T16:45:44Z","closed_at":null,"body":"Hi,\r\n\r\nI'm trying to construct an alert that compares the count of the past 1 hour of elasticsearch error messages against past messages.  Is there any way to use a band() function with escount()?\r\n\r\nThank you!"},"comment":{"url":"https://api.github.com/repos/bosun-monitor/bosun/issues/comments/243180922","html_url":"https://github.com/bosun-monitor/bosun/issues/1891#issuecomment-243180922","issue_url":"https://api.github.com/repos/bosun-monitor/bosun/issues/1891","id":243180922,"user":{"login":"kylebrandt","id":1692624,"avatar_url":"https://avatars.githubusercontent.com/u/1692624?v=3","gravatar_id":"","url":"https://api.github.com/users/kylebrandt","html_url":"https://github.com/kylebrandt","followers_url":"https://api.github.com/users/kylebrandt/followers","following_url":"https://api.github.com/users/kylebrandt/following{/other_user}","gists_url":"https://api.github.com/users/kylebrandt/gists{/gist_id}","starred_url":"https://api.github.com/users/kylebrandt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kylebrandt/subscriptions","organizations_url":"https://api.github.com/users/kylebrandt/orgs","repos_url":"https://api.github.com/users/kylebrandt/repos","events_url":"https://api.github.com/users/kylebrandt/events{/privacy}","received_events_url":"https://api.github.com/users/kylebrandt/received_events","type":"User","site_admin":false},"created_at":"2016-08-29T16:45:44Z","updated_at":"2016-08-29T16:45:44Z","body":"This would be a new es function. Basically would need to make sure we hit the right indexes, and make multiple elastic Range Filters OR'd together. I had no considered this when I did the elastic functions, and also have some refactoring there in another branch.\r\n\r\nI'll aim to get this into the 0.6.0 beta (aiming to release that near end of sept).\r\n\r\nThe other strategy would be to make N queries like we do with OpenTSDB, but my instinct would be that that would be the wrong choice for elastic."}}
{"actor":{"display_login":"kylebrandt"}}