# Create a new index to store alerts
**URL:** https://discuss.elastic.co/t/create-a-new-index-to-store-alerts/241003
**Category:** Elasticsearch
**Tags:** elastic-stack-alerting
**Created:** [July 13, 2020, 3:18pm UTC](https://discuss.elastic.co/t/create-a-new-index-to-store-alerts/241003 "2020-07-13T15:18:37Z")
**Posts on this page:** 10
**Page:** 1
### Author:  [@robertitox](https://discuss.elastic.co/u/robertitox)
#### Post date: [July 13, 2020, 3:18pm UTC](https://discuss.elastic.co/t/create-a-new-index-to-store-alerts/241003/1 "2020-07-13T15:18:38Z")
Dear all, I have an ELK 7.8.0 server running OK.
I want to create some alerts for different events, and because I have the ELK open source version, I just can create two type of connectors: Index and Server Log. I'd like to have an index connector, so I ask you:
How can I create a new index called "alerts", with day rotation and index pattern "alerts-\*", suitable for storing every type of alerts???
Thanks a lot !!!
---
### Author:  [@Patrick\_Mueller](https://discuss.elastic.co/u/Patrick_Mueller)
#### Post date: [July 22, 2020, 3:58pm UTC](https://discuss.elastic.co/t/create-a-new-index-to-store-alerts/241003/2 "2020-07-22T15:58:57Z")
For clarification, Kibana alerting is not available in open source version of Kibana, but is available in the Basic licensed version that you can download directly from here: [https://www.elastic.co/downloads/kibana](https://www.elastic.co/downloads/kibana) - I'll assume you are using that version rather than the open source version.
In terms of creating a new index with roll-over, you'll want to look into ILM - Index Lifecycle Management - [https://www.elastic.co/guide/en/elasticsearch/reference/current/index-lifecycle-management.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/index-lifecycle-management.html)
It allows you to describe an index, index template, alias and rollover patterns in one managed place. Once that is set up and running, you can use the alias as the index name in index connector to have it write to the "current" index.
---
### Author:  [@robertitox](https://discuss.elastic.co/u/robertitox)
#### Post date: [July 23, 2020, 12:41pm UTC](https://discuss.elastic.co/t/create-a-new-index-to-store-alerts/241003/3 "2020-07-23T12:41:31Z")
Dear Ptrick, thanks a lot for your answer, it's very relevant to me.
Because I have a Debian 10 box, I've installed Elasticsearch, Kibana and Logstash in this way:
# echo "deb [https://artifacts.elastic.co/packages/7.x/apt](https://artifacts.elastic.co/packages/7.x/apt) stable main" | tee -a /etc/apt/sources.list.d/elastic-7.x.list
# apt update
# apt install elasticsearch
# apt install kibana
# apt install logstash
In this way, Kibana hasn't email alert, just Index and Syslog alerts.
Is there any way to install Kibana with APT Debian in order to have email alerts?
Thanks a lot again!!!
---
### Author:  [@Patrick\_Mueller](https://discuss.elastic.co/u/Patrick_Mueller)
#### Post date: [July 23, 2020, 3:42pm UTC](https://discuss.elastic.co/t/create-a-new-index-to-store-alerts/241003/4 "2020-07-23T15:42:28Z")
Thanks for the info. You're using our "basic" licensed product (just to clarify since you previously mentioned using the open source version, which is different - basic is free, but not open source).
To get access to the other actions beyond server log and index, you'll need a gold license, or you can get a trial license to try it out for a while for free. There should be a link you can click on the connector's page to explore the gold license and trial:
If you're running Kibana on localhost, that link would be: [https://localhost:5601/app/management/stack/license\_management](https://localhost:5601/app/management/stack/license_management)
All of the actions are also available in our cloud deployment offering, available here: [https://cloud.elastic.co/](https://cloud.elastic.co/)
---
### Author:  [@robertitox](https://discuss.elastic.co/u/robertitox)
#### Post date: [July 23, 2020, 6:13pm UTC](https://discuss.elastic.co/t/create-a-new-index-to-store-alerts/241003/5 "2020-07-23T18:13:09Z")
Ok Patrick, nos I understand.
Thank you so much!!!
---
### Author:  [@robertitox](https://discuss.elastic.co/u/robertitox)
#### Post date: [August 4, 2020, 3:48pm UTC](https://discuss.elastic.co/t/create-a-new-index-to-store-alerts/241003/6 "2020-08-04T15:48:41Z")
Dear Patrick, how are you?
Some days ago you told me I have an ELK basic license (I installed ELK stack from Debian repositories) and so I have no the mail alerting feature (I have to pay for a license if I have to enable it).
But you mentioned the Kibana open source version, which has the mail alerting feature enabled.
So how can I do to have an ELK stack with Kibana open source version? In case it's possible, can I do that from Debian repo packages???
Thanks a lot again!!!
---
### Author:  [@Patrick\_Mueller](https://discuss.elastic.co/u/Patrick_Mueller)
#### Post date: [August 4, 2020, 4:55pm UTC](https://discuss.elastic.co/t/create-a-new-index-to-store-alerts/241003/7 "2020-08-04T16:55:54Z")
> [@robertitox](#):
>
> But you mentioned the Kibana open source version, which has the mail alerting feature enabled.
Sorry for the misunderstanding. The open source distribution of Kibana from elastic does not have any alerting available at all, and none of the actions (like email). The free "basic" license (which is not open source) version does include alerting, but not the email action (only index and log actions). The "basic" license can be upgraded to a paid "gold" license to get access to the additional actions (like email).
The way the product is structured is that there's an Apache-licensed open source version of elastic products (elasticsearch, Kibana, etc), and then we provide additional functionality on top of the open source version, available with the free "basic" license. To use the Kibana alerting feature from elastic, you'll have to be running at least the "basic" license version.
---
### Author:  [@robertitox](https://discuss.elastic.co/u/robertitox)
#### Post date: [August 5, 2020, 1:06pm UTC](https://discuss.elastic.co/t/create-a-new-index-to-store-alerts/241003/8 "2020-08-05T13:06:24Z")
Dedar Patrick, now I understand !!!
Please, just a last question: is there any third-party software/plugin in order to get email alerts in Kibana? Because my company will not buy a license until November, I'm in the test phase and I need to test the email alerting capability.
Special thanks, greetings!!!
---
### Author:  [@Patrick\_Mueller](https://discuss.elastic.co/u/Patrick_Mueller)
#### Post date: [August 5, 2020, 4:24pm UTC](https://discuss.elastic.co/t/create-a-new-index-to-store-alerts/241003/9 "2020-08-05T16:24:39Z")
Sorry, I'm not familiar with the 3rd party ecosystem of Kibana plugins. You can enable a 30-day trial license, described above via the "Manage license" link in the "Select a connector" ui, which will give you 30 days of access to the all the actions, including email.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 2, 2020, 4:24pm UTC](https://discuss.elastic.co/t/create-a-new-index-to-store-alerts/241003/10 "2020-09-02T16:24:40Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.