Hi, Currently, when creating an alert, we can set up for example the next scenario: When avg system.cpu.total.pct is above 90% for the last 1 minute. Okey...It will affect to all the hosts which matches this query, that's the reason we use: Create alert per agent.hostname. So finally, we will re…

Create alert per multiple fields

Zacqary (Zacqary Adam Xeper) July 28, 2020, 3:18pm 2

As of Kibana 7.8 you should be able to add multiple values to Create alert per:

Does that work for you?

Alerting on log data

Topic		Replies	Views
Kibana Alert Index Threshold and Log Threshold Host.ip Fields Kibana elastic-stack-alerting	5	327	April 13, 2023
Kibana alert type Metric threshold add fields index to body Email Kibana	2	437	October 4, 2022
Kibana Alert variable declaration Kibana elastic-stack-monitoring , elastic-stack-alerting	5	398	August 16, 2022
Need help with creating Kibana Alert Elasticsearch elastic-stack-alerting , elastic-stack-sql	9	1525	May 17, 2021
Kibana, Alerts and Actions, does not allow adding hostname in the message Kibana elastic-stack-alerting	6	2305	October 23, 2020