I would like to create a rule to send alert if there is an index in the system with index rate in the last 10 min exceeds a threshold value. I can see index rate from stack monitoring for each index, but how can I to write such a rule: "if any index's index rate > 500/s, send alert with the index name.
Please take a look at Kibana Alerting at the Stack Management application. This is for example a rule definition to check every minute a set of indices and raise an alert if there are more than 5000 records for the last minute.
More details on this guide
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.