# Can we send two emails when the data matches particular string?

**URL:** <https://discuss.elastic.co/t/can-we-send-two-emails-when-the-data-matches-particular-string/160220>\
**Category:** Elasticsearch\
**Created:** [December 10, 2018, 4:52pm UTC](https://discuss.elastic.co/t/can-we-send-two-emails-when-the-data-matches-particular-string/160220 "2018-12-10T16:52:33Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![sudhakar\_katakara](https://avatars.discourse-cdn.com/v4/letter/s/977dab/32.png) [@sudhakar\_katakara](https://discuss.elastic.co/u/sudhakar_katakara)\
**Post date:** [December 10, 2018, 4:52pm UTC](https://discuss.elastic.co/t/can-we-send-two-emails-when-the-data-matches-particular-string/160220/1 "2018-12-10T16:52:33Z")

</div>

we are monitoring Infrastructure (around 5000 servers) using different monitoring tools(around 5 tools). Whenever any server goes down, all monitoring tools generate an events and send an email. So approximately if server A is down, 5 events ( and converted to emails) from monitoring tools (one event from each tool). And same thing for server B ( one event from each monitoring tool hence 5 events for server B). Instead of sending 5 notifications (events) on same device, we want to send only one event (via email) out of 5 events from one device. Means if server A and Server B are down, tools generate 5 event on server A and 5 events on Server B. we want to send one event on server A and other event on Server B. we are able to load the events (here 10 events) to elastic search. By which alert rule/configuration do we need to use to generate two emails (one for server A and other one for Server B) in elastalert?

Note: we are using last 10 min time period.

Thanks,  
Sudhakar

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 7, 2019, 5:01pm UTC](https://discuss.elastic.co/t/can-we-send-two-emails-when-the-data-matches-particular-string/160220/2 "2019-01-07T17:01:09Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.