Create an index rate alert

[pingz (Ping Zhang)]

Hi there:

I would like to create a rule to send alert if there is an index in the system with index rate in the last 10 min exceeds a threshold value. I can see index rate from stack monitoring for each index, but how can I to write such a rule: "if any index's index rate > 500/s, send alert with the index name.

[jsanz (Jorge Sanz)]

Please take a look at Kibana Alerting at the Stack Management application. This is for example a rule definition to check every minute a set of indices and raise an alert if there are more than 5000 records for the last minute.

More details on this guide

Alerting | Kibana Guide [7.15] | Elastic