thruk_top_noisy_services
Lists services with the highest alert counts in a given time range, enabling quick identification of problematic services for focused remediation.
Instructions
Return the top N services ranked by SERVICE ALERT count over a time window.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| since | No | Start of analysis window. Thruk relative time ("-2h", "-7d") or ISO datetime ("2026-05-21 14:00:00"). Default: last 24 h. | -24h |
| until | No | End of the time window (same formats as since). Default: now. | |
| filter | No | Structured filter tree supporting AND/OR nesting. Two node types: leaf: {"type":"leaf", "field":"...", "op":"...", "value":...} group: {"type":"group", "operator":"and"|"or", "conditions":[...]} Available fields: custom_var, host, hostgroup, service Operators: eq, gte, in, lte, neq, regex Examples: # Objects in HG_AGILE: {"type":"leaf","field":"hostgroup","op":"eq","value":"HG_AGILE"} # In HG_AGILE OR with KERNEL=windows: {"type":"group","operator":"or","conditions":[ {"type":"leaf","field":"hostgroup","op":"eq","value":"HG_AGILE"}, {"type":"leaf","field":"custom_var","op":"eq","value":{"var":"KERNEL","val":"windows"}} ]} | |
| backends | No | Comma-separated backend names (sites). Omit for all backends. | |
| group_by | No | Aggregation dimension: 'service' (default, one row per host+service), 'host' (rolled up per host), 'hostgroup' or 'servicegroup' (ventilation par client). | service |