{
  "name": "HAProxy backend 5xx surge",
  "description": "The load balancers are returning 5xx from their backends well above the ~0.8 per ten minutes a healthy estate produces",
  "query": "service=haproxy earliest=-10m | where status>=500 | stats count",
  "query_language": "spl",
  "condition_type": "threshold",
  "eval_interval_seconds": 60,
  "for_minutes": 2,
  "notification_target_id": "__TARGET_OPS__",
  "enabled": true,
  "comparator": "gt",
  "threshold_value": 4
}