Create alerts for logs ingestion in kibana

Elastic Stack Kibana
1

Hello,
I'm trying to create an alert for log ingestion alert.
ex- If we have one index pattern and logs stopped coming to the kibana for the last 5 min, Can we create an alert for this in kibana?

2

Yes, you can use the Index Threshold rule type.

You would need to configure the alert to trigger if the number of documents for a period the time is below some specific number.

3

@leandrojmp Thank you for the reply, How do I add a slack webhook URL for the alerts?

4

Do you a have a paid license or are you using the free basic license?

With the free basic license you can't add a slack webhook, the only actions available are the log one, which will log the alert in kibana's log and the index one, which will write the alert to a specific index.

If you have a paid license you just need to follow the documentation on how to create a Slack action.

5

Thanks @leandrojmp,
I am able to create alerts but when I received the alerts it look plain alert, I'm trying to customize messages like adding color code, In which language message should be written?

6

Which action are you using?

The alert is in plain text, any customization will be done on the destination of the action, if it allows it.

7

Slack action I'm using.

8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.