Checking the ack state of a watch without doing an API call

Elastic Stack Elasticsearch
1

Is there a way to check, within the watch itself, the ack state of an action without doing an API call? And if so, can you manually change that field within the watch without using the API call?

2

What about using an http input which calls the http endpoint from the watch itself?

3

Hmm, I'm not sure. Maybe I can tell you my use case and, if you can, let me know the best way to approach it.

I want to monitor whether a service is up or down. Lets say every minute I check that last five minutes of logs from a service. If there are 0 logs I want to notify the admin and then stop the watch from further execution until the service comes back up.

I looked into the Ack Watch API but wanted to find a better solution. If that info is accessible within the watch itself that would be helpful.

And if not this, is there a way to have a statically created variable that I can access/modify in the watch?

4

Why? I mean why this solution does not work for you?

5

Actually, I think this will work. Thank you

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.