Chain input - get results filtered by first input

Elastic Stack Elasticsearch
1

Hi!

I'm trying to get working a watcher which would alert me when one of my sites generates some error, but I'm only interested in that data if there aren't normal response codes.
I tried referring to the first input's data, but if I understood correctly here it's not possible. Then I thought I could compare somehow the two result set but couldn't get any result from that.
I'd like to achieve somehow that if field equals to X then check how many times got the same pages (by referring to the first result set's other indexed field) got Y. Preferably I'd check the difference, but that's after I get this working :slight_smile:

Thank you!

2

You can have a first search/aggregation that identify all sites that have an error and then chain it to a second search/aggregation that for these sites retrieves the number of normal response codes. An example of doing something similar can be found here.

3

Thank you!

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.