Context group not visible in rule

Elastic Stack Kibana
1

I’ve set a GROUP BY query which looks as follows under Rules:

image
image604×207 13.2 KB

When I test the index connector via Dev Tools the context.group stays empty. My document is formatted as follows:

{
  "alert_type": "ERROR_THRESHOLD_BREACH",
  "server": "{{context.group}}",
  "error_count": "{{context.value}}",
  "threshold": 1,
  "time_window": "5m",
  "rule_name": "{{rule.name}}",
  "rule_id": "{{rule.id}}",
  "triggered_at": "{{context.date}}"
}

All fields appear but the context.group. What is the correct approach to fix this problem?

2

Hello @Dhruv_Naik

Try using {{context.grouping}}

Thanks!!