# Creating a kibana rule to report the table of documents for the hits received in indices

**URL:** <https://discuss.elastic.co/t/creating-a-kibana-rule-to-report-the-table-of-documents-for-the-hits-received-in-indices/305154>\
**Category:** Kibana\
**Created:** [May 19, 2022, 9:18am UTC](https://discuss.elastic.co/t/creating-a-kibana-rule-to-report-the-table-of-documents-for-the-hits-received-in-indices/305154 "2022-05-19T09:18:00Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![vinitnair93](https://avatars.discourse-cdn.com/v4/letter/v/a3d4f5/32.png) [@vinitnair93](https://discuss.elastic.co/u/vinitnair93)\
**Post date:** [May 19, 2022, 9:18am UTC](https://discuss.elastic.co/t/creating-a-kibana-rule-to-report-the-table-of-documents-for-the-hits-received-in-indices/305154/1 "2022-05-19T09:18:00Z")

</div>

I have written a kibana rule (Elasticsearch query) that would check every 1 day for an index with size 1

Elasticsearch query -

{  
"query":{  
"match\_all" : {}  
},  
"fields": [  
"@timestamp",  
"column\_2"  
],  
"\_source": false,  
"sort": [  
{  
"@timestamp": "desc"  
}  
]  
}

When I test the query, It returns me the the correct list of documents.

but for some reason I am unable to receive an Incident on my Jira instance (configured an action that would check if the number of matches is above or equals 1 for the last 24 hours and if yes, then report it as an Incident in Jira (Ihave configured the Jira conector))

For some reason I am unable to get the incidents in Jira

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 16, 2022, 9:18am UTC](https://discuss.elastic.co/t/creating-a-kibana-rule-to-report-the-table-of-documents-for-the-hits-received-in-indices/305154/2 "2022-06-16T09:18:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.