Alerts and actions filters

Elastic Stack Kibana
1

Hello,

I am using Elastic stack version 7.9. I am trying to use alerts and actions instead of watcher for my various alerts. Is it possible to filter out some documents? The only options I got is to create an alert for "all documents" or for "top documents".

Also, in the same context, I am trying to use alerts for my APM instances for transaction duration. I got two applications using the same APM index. Does alerting distinguish the duration fields between my two different applications?

2

Have you tried to use a different alert templates, like the log threshold?
This seems to provide more options to filter your documents as you prefer

Screenshot 2020-08-31 at 19.24.17
Screenshot 2020-08-31 at 19.24.17746×446 27.8 KB

1 Like
3

Thanks for the suggestion. It would be nice if I could use more comparison operators like

WITH duration MORE THAN 300

It solved some of my cases though, thanks again.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.