About the Watcher alert configure

today i think of the other way again ...

but ... i don't know what the ES.log say ... what is found ? its found two defintions in [aggs] now !!! i think it is success , but why do you say .... please tell me how can i to do

Thanks a lot !