I am using watcher to raise alerts to an alerting system. I am wondering if it is possible to have the Action block execute multiple times ? I want to be able to generate the individual alerts (webhook action) for the each unique hostnames found in payload.hits.hits._source,hostname.
I found similar tickets raised in 2015 ,
I want to generate the individual JIRA tickets (webhook action) for the each document found by watcher condition.
Currently I know how to generate a JIRA ticket once the watcher condition is matched but It generates the single JIRA ticket for all the matched document(In my case : document containing the JAVA exceptions). Where as I am searching for a way to generate separate JIRA tickets for each documents found by watcher condition.
I am wondering if it is possible to have the trigger block execute multiple times. In my example below I would like to have the webhook trigger execute for each unique hostname returned from my query results (all failed logons). The example was first designed to just grab the hostname of the first record returned from my query. I have no clue how I would go about changing my watch to accomplish what I'd like to do. I'd be greatly appreciated any help/suggestions!
curl -XPUT 'http://localho…
Is it possible using the new version ?
this still holds true. Also the provided workarounds and in the referenced threads are still valid.
Any chance for this feature in future versions ?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.