Add timestamp to index created by Watcher action


This is related to Watchers using 'index' action i.e. putting alert info (key, value) to the specified log.

However I noticed that the index entries don't have any date/timestamp field, how can I add a new field and set it as auto timestamp so that I can sort the log data according to the time they were created or watcher was fired.



You can add the time of watch execution in the indexed document by adding the execution_time_field to the index action configuration:

1 Like

Thanks, it helped.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.