Adding conditions dynamically to the watcher

Elastic Stack Elasticsearch
1

Hello Team,

Could you please help me understand if adding conditions dynamically to the watcher is possible.
I will try to explain the scenario. for example if i have 3 status codes for which i am checking the index if i get x number of occurrences within say one day i will raise an alert but if i want to add one more status code or remove the code ore add different date range conditions

if create a watch like this (please ignore the syntax)
if status==New and number of records in day == 10 raise an alert 
now i want to add status = updated date range = 2 days threshold = 20

can i create a generic watcher which will read the list with configurable values and raise alert accordingly.

Thank you for your help and support

Aditya

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.