# Alerting when data stops coming in from variety of sources

**URL:** <https://discuss.elastic.co/t/alerting-when-data-stops-coming-in-from-variety-of-sources/379787>\
**Category:** Kibana\
**Tags:** elastic-stack-alerting\
**Created:** [July 3, 2025, 6:06pm UTC](https://discuss.elastic.co/t/alerting-when-data-stops-coming-in-from-variety-of-sources/379787 "2025-07-03T18:06:55Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [July 3, 2025, 7:23pm UTC](https://discuss.elastic.co/t/alerting-when-data-stops-coming-in-from-variety-of-sources/379787/2 "2025-07-03T19:23:49Z")

</div>

Perhaps take a look at this

> [@Alert on no data per source?](https://discuss.elastic.co/t/alert-on-no-data-per-source/376425):
>
> [here](https://discuss.elastic.co/t/alert-when-data-is-missing/307886/2) @leandrojmp suggested a Log Threshold to get reported when no logs are added in the last 5 mins. This works but only if you add the specific source as a WITH condition. In my case I want to be reported on say 6 sources (but not 2 other stale sources in the index history). It seems it's not suitable in this case at least in the UI since you can only have WITH...IS...AND where the more suitable would be something like WITH source IN [a, b, c] and GROUP BY source. Is there any alternative bes…

---

_[View the full topic](https://discuss.elastic.co/t/alerting-when-data-stops-coming-in-from-variety-of-sources/379787)._