# Adding visual alerts on my Kibana Dashboards **URL:** \ **Category:** Kibana\ **Created:** [July 30, 2018, 11:33am UTC](https://discuss.elastic.co/t/adding-visual-alerts-on-my-kibana-dashboards/142161 "2018-07-30T11:33:33Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![DK1206](https://avatars.discourse-cdn.com/v4/letter/d/b487fb/32.png) [@DK1206](https://discuss.elastic.co/u/DK1206)\ **Post date:** [July 30, 2018, 11:33am UTC](https://discuss.elastic.co/t/adding-visual-alerts-on-my-kibana-dashboards/142161/1 "2018-07-30T11:33:33Z")
Dear Elastic Community, I have set-up my ElasticStack with having WinLogbeat and Packetbeat running through my logstash. I custmoized my Sysmon (winlogbeat) dashboard and I used some default templates for Packetbeat one. Now I would like to add some alerts to my ES. My goal is to get as close as possible to SIEM with my ES. Now that I have some data and visuals flowing on my Kibana, I am missing some alerts that would stand out. I would like to have some icon notification either in Dashboards or in Discover tab, that would notify me that this is is a possible incident / threat (for e.g. a red triangle (if severity is high) next to some output data). Of course I tried browsing for it and I ran into _ElastAlert_. I tried that one, but if I understood it correct, it would notify me only on my e-mail (if I configured the rule so) whether a hit would be made. I am seeking for a solution that can do that too + can be displayed on my Kibana Dashboard. **EXAMPLE:** WinLogbeat detects a cmd.exe execution. I define that as a threat. Now once logstash forwards that to ElasticSearch, I want that Kibana displays that index as an alert (red triangle next to logdata, red text,..whatever, something to stand out among all those other logs). Is there any other idea on how to implement such a thing? Thanks ---
**Author:** ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)\ **Post date:** [July 30, 2018, 5:27pm UTC](https://discuss.elastic.co/t/adding-visual-alerts-on-my-kibana-dashboards/142161/2 "2018-07-30T17:27:11Z")
Hey @DK1206, this sounds like a great candidate for [Watcher](https://www.elastic.co/guide/en/x-pack/6.2/xpack-alerting.html) and the [e-mail](https://www.elastic.co/guide/en/x-pack/6.2/actions-email.html) and [index](https://www.elastic.co/guide/en/x-pack/6.2/actions-index.html) actions. Using Watcher, you can detect specific events occurring and then have it send an e-mail and index a document specifying what happened. After the document is indexed, you can integrate this to be displayed in the Kibana Dashboard a number of ways. You could create a Visualization that simply lists these alerts, or you can use Time Series Visual Builder's [annotations](https://www.elastic.co/guide/en/kibana/current/time-series-interface.html#_annotations_tab) to overlay this information on a specific chart. ---
**Author:** ![DK1206](https://avatars.discourse-cdn.com/v4/letter/d/b487fb/32.png) [@DK1206](https://discuss.elastic.co/u/DK1206)\ **Post date:** [July 30, 2018, 6:09pm UTC](https://discuss.elastic.co/t/adding-visual-alerts-on-my-kibana-dashboards/142161/3 "2018-07-30T18:09:50Z")
Hey Brandon! Thanks for your reply. Is Watcher also free to use tools? I forgot to mention I am trying to build my stack with free / opensource tools. Best, D ---
**Author:** ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)\ **Post date:** [July 30, 2018, 6:11pm UTC](https://discuss.elastic.co/t/adding-visual-alerts-on-my-kibana-dashboards/142161/4 "2018-07-30T18:11:40Z")
Hey @DK1206, unfortunately Watcher/Alerting is part of our [Gold subscription](https://www.elastic.co/subscriptions) currently so it's not free/OSS. ---
**Author:** ![DK1206](https://avatars.discourse-cdn.com/v4/letter/d/b487fb/32.png) [@DK1206](https://discuss.elastic.co/u/DK1206)\ **Post date:** [July 30, 2018, 6:18pm UTC](https://discuss.elastic.co/t/adding-visual-alerts-on-my-kibana-dashboards/142161/5 "2018-07-30T18:18:00Z")
Do you perhaps know any OpenSource alternatives for what I am seeking for? I know something 3rd party wont integrate as nicely as your solution for my stack - but maybe if I put effort . ---
**Author:** ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)\ **Post date:** [July 30, 2018, 6:19pm UTC](https://discuss.elastic.co/t/adding-visual-alerts-on-my-kibana-dashboards/142161/6 "2018-07-30T18:19:10Z")
Hey @DK1206 I'm not aware of anything, but other community members might be able to chime in with what they're doing. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 27, 2018, 6:19pm UTC](https://discuss.elastic.co/t/adding-visual-alerts-on-my-kibana-dashboards/142161/7 "2018-08-27T18:19:15Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.