# Correlate with watcher?

**URL:** <https://discuss.elastic.co/t/correlate-with-watcher/169278>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-alerting\
**Created:** [February 20, 2019, 7:34pm UTC](https://discuss.elastic.co/t/correlate-with-watcher/169278 "2019-02-20T19:34:45Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![paniccontrol](https://avatars.discourse-cdn.com/v4/letter/p/b19c9b/32.png) [@paniccontrol](https://discuss.elastic.co/u/paniccontrol)\
**Post date:** [February 20, 2019, 7:34pm UTC](https://discuss.elastic.co/t/correlate-with-watcher/169278/1 "2019-02-20T19:34:45Z")

</div>

Hello,

I m wondering if with watchers it would be able to interogates external sources of data , like external database to be able to do correlations, do operations, on results aggregates, enrich with external source, for alerting,... or should we more based on an external tools like pentaho or other ?

---

<div class="post-metadata">

**Author:** ![baz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/baz/32/5183_2.png) [@baz](https://discuss.elastic.co/u/baz)\
**Post date:** [February 25, 2019, 6:34pm UTC](https://discuss.elastic.co/t/correlate-with-watcher/169278/2 "2019-02-25T18:34:09Z")

</div>

Hi,

Our search input can use arbitrary data from something over http in the watch. You can look at the [http input](https://www.elastic.co/guide/en/elastic-stack-overview/current/input-http.html) to retrieve arbitrary data as well as how to chain and transform searches with arbitrary data in the [chain input](https://www.elastic.co/guide/en/elastic-stack-overview/current/input-chain.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 25, 2019, 6:34pm UTC](https://discuss.elastic.co/t/correlate-with-watcher/169278/3 "2019-03-25T18:34:09Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
