Hi, Currently, when creating an alert, we can set up for example the next scenario: When avg system.cpu.total.pct is above 90% for the last 1 minute. Okey...It will affect to all the hosts which matches this query, that's the reason we use: Create alert per agent.hostname. So finally, we will re…

Create alert per multiple fields

Zacqary (Zacqary Adam Xeper) July 28, 2020, 3:18pm 2

As of Kibana 7.8 you should be able to add multiple values to Create alert per:

Does that work for you?

Alerting on log data

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.