I have this nut that I've been trying to crack for a while now. I'm wondering if it is possible to edit a field or add a tag of the ES documents that match a watcher query. Ideally, when a log comes into my pipeline that is urgent I want to do two things: Send an email to myself to alert that th…

Can anyone help me figure this out?

Hmm yeah, that looks like a splendid way to solve this problem! Thanks!!

So I've made a watch that has an update by query, but the main issue with this is that I then have to have two queries in the same watch which is a bit too unwieldy for me (I have to be making these watches daily and it seems redundant to have to change several parts of the watch for the same change…

Hey, so the input of the watch (and the search result) can be used as input for the email, but the update by query needs to be its own query (and thus also its own definition). I havent understood why this is a problem exactly, maybe you could elaborate on that as well. Thank you! --Alex

Doing it this way is quite hard to work with for the system I'm creating and I would love to know if there is another way that I only need to type the query that I'd like to replace once.

Adding/editing fields through watcher

Elastic Stack Elasticsearch

spinscale (Alexander Reelsen) February 15, 2017, 10:44am 3

Hey,

how about using a webhook, that runs an update by query?

--Alex

Topic		Replies	Views
Updating/Editing field in ES index using Watcher Elasticsearch elastic-stack-alerting	1	627	January 10, 2019
Can 'Index action' update the documents that satisfy condition of watch? Elasticsearch elastic-stack-alerting	1	895	July 6, 2017
Any way of specifying a tag within a watch? Elasticsearch elastic-stack-alerting	4	484	June 20, 2019
Update all documents that were matched against the query in the watcher as part of the watcher action Elasticsearch elastic-stack-alerting	5	1465	November 21, 2017
Is it possible to update a document in watcher Elasticsearch elastic-stack-alerting	3	1188	October 2, 2018

Adding/editing fields through watcher

Related topics