Alert rule to detect abrupt reduction of interface traffic

Hi all,
I need to create an alert rule to detect if an interface suddenly had a reduction below X%, for example. Interface100 now is with 800M traffic. Next update that traffic is 200M, indicating that is someting probably wrong. How can I do that rule? Any Idea?