Hi, I am wondering if it is possible to have the trigger block execute multiple times. In my example below I would like to have the webhook trigger execute for each unique hostname returned from my query results (all failed logons). The example was first designed to just grab the hostname of the fi…

Can you Trigger Watch action for each unique result returned

darshandpatel (Darshan Patel) November 17, 2015, 8:12pm 4

Did you try Logstash to process the resulted records/documents?

Please let me know if you have any update on it.

Thank you.

Topic		Replies	Views
Different alerts for different hosts Elasticsearch elastic-stack-alerting	3	739	September 28, 2018
Have watcher send several emails for payload with several search results Elasticsearch elastic-stack-alerting	6	3840	July 6, 2017
Loop through watcher results to create multiple actions Elasticsearch elastic-stack-alerting	2	1763	September 11, 2017
Watcher, execute action for individual buckets from aggregation? Elasticsearch elastic-stack-alerting	3	1675	August 10, 2018
Multiple actions in the watcher yet? Elasticsearch elastic-stack-alerting	3	1187	July 20, 2018