I am using ELK 7.9.0 inside the docker. I have created an alert for uptime with configuration.
I have used a combination of filters. I want to get an alert for zookeeper having port 2181 in the local instance. The zookeeper is still running but it shows me down.
When I checked uptime, it works fine.
But alert index looks like:-
When I use the individual filter like location or port. It works properly. Please help, how I can use filters for these scenarios?