We have a metrics setup in the sumologic that gives us the latest row_count of the tables in our system(polls the row_count from DB in every hour). I want to raise an alert if the row_count for any of the table decreases. So far tried the query predicate as
metrics=some_metric table_name=some_table | where latest < max
But, it seems that the max and latest both gets decremented to the new row_count and query fails. Is there a a way to implement this using metrics?
