# you can disable an alarm notification by setting the 'to' line to: silent

# check if a QoS class is dropping packets
# the alarm is checked every 10 seconds
# and examines the last minute of data

template: 10min_qos_packet_drops
      on: tc.qos_dropped
      os: linux
   hosts: *
  lookup: sum -5m unaligned absolute
   every: 30s
    warn: $this > 0
   units: packets
    info: dropped packets in the last 5 minutes
      to: silent