I am new to elastic and was hoping you can help me.
I am using elastic to collect logs from both packetbeat to my 'packetbeat' index, and filebeat to my 'filebeat' index.
I have an IP field in both of the indexes and I would like to trigger an alert if there's a match (if IP from packetbeat index log appears in IP field of filebeat index log)
since source.ip = recipientIP -> trigger an alert.
What is the method of doing so?
I am using managed version of elastic stack (cloud) and using the web console to perform the alerts (not python or anything like that)
Thank you in advance