I have an overnight process that creates a daily index at 02:00 : myindex-YYYY-MM-DD
This index has eight fields, but I am interested in three:
The value of result will be either PASS or FAIL
I would like to create a watch that compares the index from today against the index from yesterday and alerts me of any changes to the result field value.
@datetime:2016-03-08 server_name: server1 id_no: 1.1 result: PASS
@datetime:2016-03-09 server_name: server1 id_no: 1.1 result: FAIL
I would like to receive an alert that server1, id 1.1, result is now set to FAIL.
I am not sure if this is possible with Watcher, but any help that anyone could provide on this would be much appreciated.