# Alerts in ELK **URL:** \ **Category:** Kibana\ **Created:** [June 11, 2020, 5:32pm UTC](https://discuss.elastic.co/t/alerts-in-elk/236763 "2020-06-11T17:32:20Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![ManuelF](https://avatars.discourse-cdn.com/v4/letter/m/e99b99/32.png) [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Post date:** [June 11, 2020, 5:32pm UTC](https://discuss.elastic.co/t/alerts-in-elk/236763/1 "2020-06-11T17:32:20Z")
Hi, I would like to know if after the X-Pack release and some of its basic features are now included in the basic license: 1. It is possible to enable/use alerts in Kibana or I still need a paid license? 2. Is there any other way to alert form ELK? Thank you ---
**Author:** ![LizaD](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lizad/32/51074_2.png) [@LizaD](https://discuss.elastic.co/u/LizaD)\ **Post date:** [June 11, 2020, 5:36pm UTC](https://discuss.elastic.co/t/alerts-in-elk/236763/2 "2020-06-11T17:36:33Z")
Hi @ManuelF, You have some alerting features in basic license, please see: [https://www.elastic.co/subscriptions](https://www.elastic.co/subscriptions) Thanks, Liza ---
**Author:** ![ManuelF](https://avatars.discourse-cdn.com/v4/letter/m/e99b99/32.png) [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Post date:** [June 11, 2020, 6:17pm UTC](https://discuss.elastic.co/t/alerts-in-elk/236763/3 "2020-06-11T18:17:00Z")
Hi @LizaD, I checked the link and now I am aware that the basic license offers some alerting features. Can you please tell me if I those relay on X-Pack (do I need to enable it?) or provide a link to a good tutorial so I can configure and start using it. Thank you ---
**Author:** ![LizaD](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lizad/32/51074_2.png) [@LizaD](https://discuss.elastic.co/u/LizaD)\ **Post date:** [June 11, 2020, 6:21pm UTC](https://discuss.elastic.co/t/alerts-in-elk/236763/4 "2020-06-11T18:21:53Z")
Hi @ManuelF, Here is a nice blog on alerting: > **[Alerting in the Elastic Stack](https://www.elastic.co/blog/alerting-in-the-elastic-stack)** > > Watcher (our original suite of alerting features for Elasticsearch) was introduced back in 2015. Find out more about the Elastic Stack’s current alerting capabilities and the future vision: alerting everywhere, how to make sense of those alerts, and... We also have our user's guide: [https://www.elastic.co/guide/en/kibana/current/alerting-getting-started.html](https://www.elastic.co/guide/en/kibana/current/alerting-getting-started.html) If you have some specific questions or road blocks setting it up, just ping us again we will try to get you answer. Thanks! ---
**Author:** ![ManuelF](https://avatars.discourse-cdn.com/v4/letter/m/e99b99/32.png) [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Post date:** [June 12, 2020, 2:49pm UTC](https://discuss.elastic.co/t/alerts-in-elk/236763/5 "2020-06-12T14:49:11Z")
Hi @LizaD, I have been checking the documentation related to alerting, but it is still not clear to me what types alerts I can access with just the Basic License. Watcher is not available. - Alerts about the operation or performance of the node? - Alerts if the service is interrupted? - Custom alerts given a specific event? Is there a list of alerts I can check to see if those I am looking for are available with the Basic License? I would be particularly interested in receiving an alert email, if an index or a counter receives or reaches a specific value. For example, if I use Winlogbeat, I want to receive an alert email every time ELK receives a specific Event ID. Or receive an email every time an Event ID 4625 is generated for a specific user account. If an administration account fails to authenticate successfully and generates three Event ID 4625s in a row, it would be useful to receive an alert email. Do I have access to this type of alerts, based on the data I collect? Thank you ---
**Author:** ![mikecote](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mikecote/32/58549_2.png) [@mikecote](https://discuss.elastic.co/u/mikecote)\ **Post date:** [June 12, 2020, 6:39pm UTC](https://discuss.elastic.co/t/alerts-in-elk/236763/6 "2020-06-12T18:39:38Z")
Hi @ManuelF, All types of alerts so far are available in the basic license. They are being released starting with 7.7 and more to be added each release by different applications. > Alerts about the operation or performance of the node? Starting in 7.8, you will be able to use the Metrics Explorer to create some alerts based on performance of the node. [https://www.elastic.co/guide/en/kibana/7.8/metrics-explorer.html](https://www.elastic.co/guide/en/kibana/7.8/metrics-explorer.html) > Alerts if the service is interrupted? Starting in 7.7, the Uptime application will support alerting if a service is interrupted. > **[Uptime | Kibana Guide \[7.7\] | Elastic](https://www.elastic.co/guide/en/kibana/7.7/xpack-uptime.html)** > Custom alerts given a specific event? We are working on some generic alerts, starting with Index Threshold. > **[Alert types | Kibana Guide \[7.7\] | Elastic](https://www.elastic.co/guide/en/kibana/7.7/alert-types.html#alert-type-index-threshold)** > I would be particularly interested in receiving an alert email, if an index or a counter receives or reaches a specific value. This is possible using the Index Threshold alert type though the basic license only allows in-stack actions so a Gold subscription would be required to send an email. You can log to the server or index a document in basic. ---
**Author:** ![ManuelF](https://avatars.discourse-cdn.com/v4/letter/m/e99b99/32.png) [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Post date:** [June 12, 2020, 7:57pm UTC](https://discuss.elastic.co/t/alerts-in-elk/236763/7 "2020-06-12T19:57:02Z")
Hi @mikecote, Great answer! Now it is clear to me everything related to the different types of alerts that ELK stack offers. I appreciate the detailed response and the links provided. Thank you! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 10, 2020, 7:57pm UTC](https://discuss.elastic.co/t/alerts-in-elk/236763/8 "2020-07-10T19:57:07Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.