Hi, I want to send alert to user whose name in log message field.
For example a user tried to access a project but he is not authorized, in this case log captured (access is forbidden for user: 'xyx') in message field. How can we send alert from ELK to this user xyz ? is this doable ?
If alert not possible to end user, can we get alert for this user in MS team or Slack ?
All application logs are coming to ELK stack.