you could duplicate the affected services and set different thresholds to model the normal operations inside the replications and backup periods and then exclusively run the duplicates between 10pm and 6am by leveraging check periods but don’t use imports and excludes in your periods as this is buggy right now.