To report an alert if the CPU utilization is greater than 500%, use the following SQL statement in the alert policy:
SQL
* | select promql_query('rate(process_cpu_seconds_total[1m]) > 5') from metrics limit 1000