# Assistance needed in creating a watcher alert for specific hostnames if the CPU/memory goes above certain threshold

**URL:** <https://discuss.elastic.co/t/assistance-needed-in-creating-a-watcher-alert-for-specific-hostnames-if-the-cpu-memory-goes-above-certain-threshold/278454>\
**Category:** Kibana\
**Tags:** elastic-stack-alerting\
**Created:** [July 12, 2021, 6:09pm UTC](https://discuss.elastic.co/t/assistance-needed-in-creating-a-watcher-alert-for-specific-hostnames-if-the-cpu-memory-goes-above-certain-threshold/278454 "2021-07-12T18:09:04Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Patr123](https://avatars.discourse-cdn.com/v4/letter/p/ac91a4/32.png) [@Patr123](https://discuss.elastic.co/u/Patr123)\
**Post date:** [July 12, 2021, 6:09pm UTC](https://discuss.elastic.co/t/assistance-needed-in-creating-a-watcher-alert-for-specific-hostnames-if-the-cpu-memory-goes-above-certain-threshold/278454/1 "2021-07-12T18:09:04Z")

</div>

The existing threshold alert does what I need but its taking into account all the agents that are reporting to kibana using metricbeat. I only want the watcher for specific server say serverA reports a CPU level of 90% for last 5 mins then send an email. How can I do that?

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [July 12, 2021, 6:27pm UTC](https://discuss.elastic.co/t/assistance-needed-in-creating-a-watcher-alert-for-specific-hostnames-if-the-cpu-memory-goes-above-certain-threshold/278454/2 "2021-07-12T18:27:43Z")

</div>

Assuming you are talking about the new KIbana Alerting Framework you can add a filter...  
You can filter by `host.name` or any other term / tag (example `data_center : "DC1"`) and then create an alert per host using the Create alert per option below

 ![Screen Shot 2021-07-12 at 11.27.00 AM](https://us1.discourse-cdn.com/elastic/original/3X/5/a/5a347c41cfa49eebcf8d21015c2a6687417e136f.png)

---

<div class="post-metadata">

**Author:** ![Patr123](https://avatars.discourse-cdn.com/v4/letter/p/ac91a4/32.png) [@Patr123](https://discuss.elastic.co/u/Patr123)\
**Post date:** [July 12, 2021, 7:04pm UTC](https://discuss.elastic.co/t/assistance-needed-in-creating-a-watcher-alert-for-specific-hostnames-if-the-cpu-memory-goes-above-certain-threshold/278454/3 "2021-07-12T19:04:47Z")

</div>

Thank you. Yes this is what I was looking for.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 9, 2021, 7:05pm UTC](https://discuss.elastic.co/t/assistance-needed-in-creating-a-watcher-alert-for-specific-hostnames-if-the-cpu-memory-goes-above-certain-threshold/278454/4 "2021-08-09T19:05:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.