I would like to aggregate or to consolidate different single jobs or multiple jobs in order to correlate different issues I could have for one application.
What I would like to do is:
- One multiple jobs based on performance metrics for 5 servers of my application (Inside the index metricbeat)
- One multiple jobs based on error in the logs for 5 servers of my applications (Inside the index filebeat)
- One single job based on the usage of my applications (Inside the index filebeat)
The objective is to have alert just only if I have at least two issues (one related to usage and one related to one server capacity).
How can I consolidate different jobs to send notification just if I have different issues correlated?