# Can we trigger alert to end user filter from log message

**URL:** https://discuss.elastic.co/t/can-we-trigger-alert-to-end-user-filter-from-log-message/341030
**Category:** Kibana
**Tags:** elastic-stack-alerting, kql-kibana-query-language
**Created:** [August 17, 2023, 3:37pm UTC](https://discuss.elastic.co/t/can-we-trigger-alert-to-end-user-filter-from-log-message/341030 "2023-08-17T15:37:02Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![SumitSingh](https://avatars.discourse-cdn.com/v4/letter/s/7feea3/32.png) [@SumitSingh](https://discuss.elastic.co/u/SumitSingh)
#### Post date: [August 17, 2023, 3:37pm UTC](https://discuss.elastic.co/t/can-we-trigger-alert-to-end-user-filter-from-log-message/341030/1 "2023-08-17T15:37:02Z")

</div>

Hi, I want to send alert to user whose name in log message field.  
For example a user tried to access a project but he is not authorized, in this case log captured (access is forbidden for user: 'xyx') in message field. How can we send alert from ELK to this user xyz ? is this doable ?

If alert not possible to end user, can we get alert for this user in MS team or Slack ?

All application logs are coming to ELK stack.

---

<div class="post-metadata">

### Author: ![Wave](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wave/32/117242_2.png) [@Wave](https://discuss.elastic.co/u/Wave)
#### Post date: [August 21, 2023, 2:56pm UTC](https://discuss.elastic.co/t/can-we-trigger-alert-to-end-user-filter-from-log-message/341030/2 "2023-08-21T14:56:27Z")

</div>

Hi @SumitSingh,

Yes it is possible to send an alert to an email address that is found in your logs. One way to do that is to configure a [watcher](https://www.elastic.co/guide/en/kibana/current/watcher-ui.html).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 18, 2023, 2:57pm UTC](https://discuss.elastic.co/t/can-we-trigger-alert-to-end-user-filter-from-log-message/341030/3 "2023-09-18T14:57:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
