Hi All,
I want to escalate an event if it gets thrown up more than once in a 5 minute interval. e.g. the first event isn't necessarily a problem but a second event within 5 minutes would be and escalate accordingly.
I have played around with the event transform to escalate an event based on event counts (https://gist.github.com/1486570) and this seems to work for the most part.
However, because the first event sometimes happens overnight, we get false alarm when a second one appears sometime later and the first event hasn't aged yet. I don't want to put event aging too quickly. I tried creating an event transform that would be based on the firstTime attribute of an event but it looks like I can't reference this attribute in the transform.
Any pointers appreciated, thanks!