XPack Alerting has a lot of great features but its scalability is in doubt as it it is only polling based.
It would be fantastic if there was an ingestor that checks alerting conditions for new documents (where the alerting query can be checked against the new data only, and not the entire index).
Are there any plans for such an Ingest-Alerting integration?
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.