Alerting via email when new value is inserted

Hello,

I have some data that enters my elk stack every four hours.

I want to be alerted by email when data is inserted and a specific field contains a never seen before value.

I am wondering of this is possible and if so point me in the right direction to do so. Just not sure where to start.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.