Add timestamp to index created by Watcher action

Elastic Stack Kibana
1

Hello,

This is related to Watchers using 'index' action i.e. putting alert info (key, value) to the specified log.

However I noticed that the index entries don't have any date/timestamp field, how can I add a new field and set it as auto timestamp so that I can sort the log data according to the time they were created or watcher was fired.

Thanks

2

Hello,

You can add the time of watch execution in the indexed document by adding the execution_time_field to the index action configuration:

1 Like
3

Thanks, it helped.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.