Striim 3.9.7 documentation

LargeRTCheck
Screen_Shot_2016-01-07_at_10.53.00_AM.png

LargeRTCheck sends an alert whenever an access log responseTime value exceeds 2000 microseconds.

CREATE CQ FindLargeRT
INSERT INTO LargeRTStream
SELECT ale
FROM AccessStream ale
WHERE ale.responseTime > 2000;

The alert code is similar to HackerCheck's.

The typeOfActivity string for events written to the UnusualActivity WActionStore is LargeResponseTime.