# Create a Single Rule with Multiple Thresholds with Different Actions per Threshold? **URL:** \ **Category:** Kibana\ **Tags:** elastic-stack-alerting\ **Created:** [October 5, 2021, 6:00pm UTC](https://discuss.elastic.co/t/create-a-single-rule-with-multiple-thresholds-with-different-actions-per-threshold/285956 "2021-10-05T18:00:13Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![BenB196](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/benb196/32/83401_2.png) [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Post date:** [October 5, 2021, 6:00pm UTC](https://discuss.elastic.co/t/create-a-single-rule-with-multiple-thresholds-with-different-actions-per-threshold/285956/1 "2021-10-05T18:00:13Z")
Hi All, I was wondering if anyone know if the following is possible `Rules and Connectors`, as I wasn't able to figure out how to do it in the GUI. Have a single rule, let's call it `Disk Usage`. - The goal of this rule is to monitor disk usage for some hosts. Have a threshold set to `90%` usage, have an action that creates a ticket in a ticketing system. Have a second threshold set to `95%` usage, have an action that sends an email. Have a third threshold set to `98%` usage, have an action that sends a text message (SMS). Right now from what I can tell, the only way to achieve this is to have 3 separate rules. I would like to avoid this, as this can quickly grow out of control. Is this currently possible? ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [October 5, 2021, 8:11pm UTC](https://discuss.elastic.co/t/create-a-single-rule-with-multiple-thresholds-with-different-actions-per-threshold/285956/2 "2021-10-05T20:11:33Z")
So We Have Metric Threshold Rule [here](https://www.elastic.co/guide/en/observability/current/metrics-threshold-alert.html) With Alert and Warning and Recovered Actions ![Screen Shot 2021-10-05 at 1.01.00 PM](https://us1.discourse-cdn.com/elastic/original/3X/4/c/4c0bf49acb4a502f731e34224a1a6b8476ec2538.png) ![Screen Shot 2021-10-05 at 1.04.25 PM](https://us1.discourse-cdn.com/elastic/original/3X/d/a/da2285b08f7c329861c023c35fd6949e3c0f57e9.png) So we have 2 Levels today not 3 ... perhaps this would be a good start. And file feature request (I kinda like the 3 Levels as well) ---
**Author:** ![BenB196](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/benb196/32/83401_2.png) [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Post date:** [October 5, 2021, 9:05pm UTC](https://discuss.elastic.co/t/create-a-single-rule-with-multiple-thresholds-with-different-actions-per-threshold/285956/3 "2021-10-05T21:05:54Z")
Thanks @stephenb for the information. A follow up question, it appears that these `warning`/`alert` is only available on the `Metrics threshold` rule type (at least in `7.14.x`). While the example I provided was a metrics based one, I also have use cases that fall under other rule type: `Index threshold`, `Elasticsearch query`, and `Uptime monitor status`. Are there plans to expand this functionality to all rule types? Also, with regard to the number of levels feature request, do you think it would be better to ask for 3 level (i.e: `Warning`, `High`, `Critical`) or would it be better to ask for the ability to define an ( potentially unlimited) number of thresholds each with their own custom values (i.e: `Info`, `Custom_Threshold_1`, `Panic Things are broken`, etc...) ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [October 5, 2021, 9:58pm UTC](https://discuss.elastic.co/t/create-a-single-rule-with-multiple-thresholds-with-different-actions-per-threshold/285956/4 "2021-10-05T21:58:47Z")
Hi @BenB196 > [@BenB196](#): > > Are there plans to expand this functionality to all rule types? Yes I believe so but I do not have an ETA. I think Observability Alerting will be a big focus in the coming releases. > [@BenB196](#): > > Also, with regard to the number of levels feature request, do you think it would be better to ask for 3 level (i.e: `Warning` , `High` , `Critical` ) or would it be better to ask for the ability to define an ( potentially unlimited) number of thresholds each with their own custom values (i.e: `Info` , `Custom_Threshold_1` , `Panic Things are broken` , etc...) I have expressed the same "Wondering" ... I think we will go towards and established set first but I kinda like Custom Labels. Definitely put in a feature request or Thumbs up if you find 1 already. ---
**Author:** ![BenB196](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/benb196/32/83401_2.png) [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Post date:** [October 5, 2021, 10:15pm UTC](https://discuss.elastic.co/t/create-a-single-rule-with-multiple-thresholds-with-different-actions-per-threshold/285956/5 "2021-10-05T22:15:22Z")
Will do, thanks @stephenb! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 2, 2021, 10:15pm UTC](https://discuss.elastic.co/t/create-a-single-rule-with-multiple-thresholds-with-different-actions-per-threshold/285956/6 "2021-11-02T22:15:28Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.