Answer:

The default threshold for Alert #14 is defined as "The number of requests waiting to be processed has reached 5 or more for 10 or more recent samples."

In that definition, "10 or more recent samples" is not the same as "10 or more consecutive samples". Here's how Foxhound counts "recent samples" for Alert #14:

• Samples at or above the threshold count as +1 recent samples.

• Samples below the threshold count as -2 recent samples.

Here's why: Just because one single sample fell below 5 unscheduled requests doesn't mean the counting of "recent samples" must start over again from zero.

In the following example Alert #14 was issued after the threshold count of 5 was reached after only 3 "consecutive samples" because the number of "recent samples" was much higher:

Active Req, Max Req, Samples ... Unsch Req ... 6:12:52 AM Alert #14: The number of requests waiting to be processed has reached 5 or more for 10 or more recent samples. 6:12:51 AM ... 4 / 20 / 38 ... 6:12:41 AM ... 4 / 20 / 10 ... 6:12:31 AM ... 4 / 20 / 11 ... 6:12:21 AM ... 4 / 20 / 4 ... 6:12:11 AM ... 4 / 20 / 15 ... 6:12:01 AM ... 4 / 20 / 13 ... 6:11:51 AM ... 3 / 20 / 10 ... 6:11:41 AM ... 4 / 20 / 30 ... 6:11:31 AM ... 4 / 20 / 4 ... 6:11:21 AM ... 3 / 20 / 18 ... 6:11:11 AM ... 3 / 20 / 14 ... 6:11:01 AM ... 4 / 20 / 15 ... 6:10:51 AM ... 3 / 20 / 18 ... 6:10:41 AM ... 4 / 20 / 17 ... 6:10:31 AM ... 4 / 20 / 20 ... 6:10:21 AM ... 3 / 20 / 24 ... 6:10:11 AM ... 4 / 20 / 2 ... 6:10:01 AM ... 3 / 20 / 16 ... 6:09:51 AM ... 4 / 20 / 7 ... 6:09:41 AM ... 4 / 20 / 9 ... 6:09:31 AM ... 4 / 20 / 6 ... 6:09:21 AM ... 4 / 20 / 11 ...