# Combination of uptime filter (Port and location ) not working in ELK 7.9.0

**URL:** <https://discuss.elastic.co/t/combination-of-uptime-filter-port-and-location-not-working-in-elk-7-9-0/250975>\
**Category:** Synthetics\
**Tags:** elastic-stack-alerting\
**Created:** [October 5, 2020, 10:30am UTC](https://discuss.elastic.co/t/combination-of-uptime-filter-port-and-location-not-working-in-elk-7-9-0/250975 "2020-10-05T10:30:38Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![mohanr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mohanr/32/73317_2.png) [@mohanr](https://discuss.elastic.co/u/mohanr)\
**Post date:** [October 5, 2020, 10:30am UTC](https://discuss.elastic.co/t/combination-of-uptime-filter-port-and-location-not-working-in-elk-7-9-0/250975/1 "2020-10-05T10:30:38Z")

</div>

I am using ELK 7.9.0 inside the docker. I have created an alert for uptime with configuration.

![image](https://us1.discourse-cdn.com/elastic/original/3X/2/6/26af1a4714c0cce50c2070f087a6d853b8069d44.png)  
I have used a combination of filters. I want to get an alert for **zookeeper having port 2181** in the **local instance**. The zookeeper is still running but it shows me down.  
When I checked uptime, it works fine.  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/b/bb9e513326cb57b02d1802bd70c2dc3ab88f5030.png)

But alert index looks like:-  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/e/eea07711112a87ec079530c41b9a075c4ba2917f.png)

When I use the individual filter like location or port. It works properly. Please help, how I can use filters for these scenarios?

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [October 5, 2020, 2:35pm UTC](https://discuss.elastic.co/t/combination-of-uptime-filter-port-and-location-not-working-in-elk-7-9-0/250975/2 "2020-10-05T14:35:23Z")

</div>

Hello,

To confirm that I understood your problem:  
when you use only one of the filters like "USING PORT 2181" the alert works properly?  
If so, then I would check the interval set in uptime for getting the data from the instance, it might be set to longer than one minute.  
If you change your check to 3 or 5 minutes, with both filters, does it work?

---

<div class="post-metadata">

**Author:** ![mohanr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mohanr/32/73317_2.png) [@mohanr](https://discuss.elastic.co/u/mohanr)\
**Post date:** [October 6, 2020, 4:46am UTC](https://discuss.elastic.co/t/combination-of-uptime-filter-port-and-location-not-working-in-elk-7-9-0/250975/3 "2020-10-06T04:46:15Z")

</div>

Hi,

@Marius_Dragomir **Zookeeper** in running on port 2181. When I use only one filter it works perfectly. But not for multiple filters. I have checked by increasing the time as well.  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/a/0a3fe8482882d5df216a8314ed86e51d320769da.png)

It still alerts me for zookeeper is down.

---

<div class="post-metadata">

**Author:** ![shahzad31](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shahzad31/32/51637_2.png) [@shahzad31](https://discuss.elastic.co/u/shahzad31)\
**Post date:** [October 6, 2020, 8:07pm UTC](https://discuss.elastic.co/t/combination-of-uptime-filter-port-and-location-not-working-in-elk-7-9-0/250975/4 "2020-10-06T20:07:10Z")

</div>

This is unfortunately a bug, team is working on to fix it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 3, 2020, 8:07pm UTC](https://discuss.elastic.co/t/combination-of-uptime-filter-port-and-location-not-working-in-elk-7-9-0/250975/5 "2020-11-03T20:07:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
