Can 'Index action' update the documents that satisfy condition of watch?

Elastic Stack Elasticsearch
1

Hi all,

I wanted to ask if we can update the document in ES that satisfy a watch's condition. Appropriately add a field or a tag by replacing the document or updating the document with a new version.
For example:

{
    "Cpu" : "80"
}

Watch condition : Cpu > 70

{
    "Cpu" : "80"
    "tag" : "overlimit"
}

OR

{
    "Cpu" : "80"
    "Overlimit" : "T"
}

If possible can you please give a sample for this, or a sample or alternate workaround.

I am open for suggestions.

Pranav :horse_racing:

1 Like