# Alerting based on different data sources

**URL:** <https://discuss.elastic.co/t/alerting-based-on-different-data-sources/369187>\
**Category:** Kibana\
**Tags:** elastic-stack-alerting\
**Created:** [October 21, 2024, 10:32pm UTC](https://discuss.elastic.co/t/alerting-based-on-different-data-sources/369187 "2024-10-21T22:32:21Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![erikg](https://avatars.discourse-cdn.com/v4/letter/e/91b2a8/32.png) [@erikg](https://discuss.elastic.co/u/erikg)\
**Post date:** [October 21, 2024, 10:32pm UTC](https://discuss.elastic.co/t/alerting-based-on-different-data-sources/369187/1 "2024-10-21T22:32:21Z")

</div>

Hello,

How can I alert based on conditions across a variety of different data sources.

For example, I want to be alert if log.level: error x 3 from logs-\* AND system.filesystem.used.pct \>= 80% from metrics-\*

Thanks,

---

<div class="post-metadata">

**Author:** ![ashishtiwari1993](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashishtiwari1993/32/135241_2.png) [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Post date:** [October 22, 2024, 5:41am UTC](https://discuss.elastic.co/t/alerting-based-on-different-data-sources/369187/2 "2024-10-22T05:41:20Z")

</div>

Do you want to specify both the condition in one alert?

---

<div class="post-metadata">

**Author:** ![erikg](https://avatars.discourse-cdn.com/v4/letter/e/91b2a8/32.png) [@erikg](https://discuss.elastic.co/u/erikg)\
**Post date:** [October 22, 2024, 1:45pm UTC](https://discuss.elastic.co/t/alerting-based-on-different-data-sources/369187/3 "2024-10-22T13:45:48Z")

</div>

yes!  
By correlating data between sources would allow to pinpoint the root cause of an alert.