7.12 Kibana alerting
I am trying to get some details of a log message to propagate to PagerDuty. The Connector is working and events are created in PD. The alert configuration:
I read these two threads and understand that there may be multiple values of a field if the alert is the aggregation of multiple documents.
There is no aggregation in this case. I'd like to pass the values of several fields to PD, such as the device MAC, serialNumber, domainName, zoneName.