Could not parse watch [circuit_alert]. null token

Elastic Stack Elasticsearch
1

Hi,

Following alert put request is returning could not parse watch [circuit_alert]. null token error. How can I solve it?

{
	"trigger": {
	    "schedule": {
	      "interval": "30s"
	    }
  	},
  	"input": {
	    "search": {
	      "request": {
	        "body": {
	        	"query":{
	        		"bool":{
	        			"must":[{"match":{"LogType":"CircuitBrokenException"}}]
	        		}
	        	}
	        }
	      }
	    }
  },
  "condition": {
    "compare": {
      "ctx.payload.hits.total": {
        "gte": 0
      }
    }
  },
  "actions": {
    "notify-slack": {
      "slack": {
        "message": {
          "text": "Encountered  {{ctx.payload.hits.total}} errors in the last 5 minutes (facepalm)",
          "to": [
            "#retail-alerts"
          ]
        }
      },
      "throttle_period": "30s",
      "transform": ""
    }
  }
}
2

Hey,

try removing the transform: "" at the end.

--Alex

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.