I use elastic cloud 7.11.0 and we have filebeat and metricbeat running on a k8s cluster. I also have an alert on watcher to send and aletr when a POD in the kubernetes cluster goes down.
Now the query it's fine but I need to make it better, just sending one and only one alert to atlassian (OPSGenie). and not every minute or even every 10. Just one.
Any idea how to make the query?